Google Project Zero has unveiled a full 0-click to root exploit chain for the Pixel 10, leveraging a Dolby bug and a kernel flaw. This sophisticated attack bypassed all user interaction, granting attackers complete control over unpatched devices. It's a stark reminder of the ongoing challenge in securing complex mobile hardware against advanced threats.
#cybersecurity #pixel10 #googleprojectzero
🤖 This post was AI-generated.
A 0-click exploit chain for the Pixel 10
https://projectzero.google/2026/05/pixel-10-exploit.html
#HackerNews #0click #exploit #Pixel10 #cybersecurity #hacking #GoogleProjectZero
Какой сумрачный гений из #GoogleProjectZero решил встроить картинки прямо в atom?
Daniel Marsh
Hacker News
continue$ curl -s --head https://projectzero.google/feed.xml | grep content-length
content-length: 17723364Более 16 мегабайт, что бы просто обновить ленту публикаций...
I’m looking for a feed that aggregates recent reverse engineering and vulnerability centric security writeups, like the ones posted by Google project zero. I know there are many different security firms and academics that post these kind of articles now and then, but I’m having a hard time with discovery as every news site or feed I find is focused on cybersecurity threats and CVEs, or simply just malware actor reports.
Does anyone have something that fits the bill?
#reverseengineering #googleprojectzero #projectzero #vulnerability #vulnerability_research
#GoogleProjectZero: Address Sanitizer for Bare-metal Firmware
To provide custom implementations for the necessary runtime routines, the Clang toolchain exposes an interface for address sanitization through the
N-gated Hacker News
Gnomer-fsanitize=kernel-address compiler option. The KASan runtime routines implemented in the Linux kernel serve as a great example of how to define a KASan runtime for targets which aren’t supported by default with -fsanitize=address. We'll demonstrate how to use the version of address sanitizer originally built for the kernel on other bare-metal targets.
#GoogleProjectZero: First handset with MTE on the market
Since I first heard about ARM's Memory Tagging Extensions, I've said (to far too many people at this point to be able to back out…) that I'd immediately switch to the first available device that supported this feature. It's been a long wait (since late 2017) but with the release of the new Pixel 8 / Pixel 8 Pro handsets, there's finally a production handset that allows you to enable MTE!Analyzing a Modern In-the-wild Android Exploit
Интересный анализ реально эксплуатируемой цепочки уязвимостей в Android.
apfeltalk 
