Natalie Silvanovich

Integrators should update today!

Serious bugs often occur in third-party components integrated by other software. Ivan Fratric and I found this vulnerability in the Dolby Unified Decoder. It affects Android, iOS and Windows among other platforms, sometimes 0-click.

project-zero.issues.chromium.org/issues/42807...

Super cool potential ASLR leak involving dictionary hashes! googleprojectzero.blogspot.com/2025/09/poin...

fseek and you shall lfind

Where is this? I must know!

Zero-day developer and seller Exodus casually brags in a blog post about having found a WebKit zero-day and sold it for a year and a half.

blog.exodusintel.com/2025/08/04/o...

Clément Lecigne and Benoît Sevens of Google's Threat Analysis Group were the ones that reported it to Apple.

Left blue, right red #defcon

Sample image

How to use your Defcon badge

“You wouldn’t happen to have anything that could help me understand today’s ever-changing threat landscape? Perhaps involving a bit of AI?”

Peak BH slide

Do you ever feel like maybe you should sign something, but aren’t quite sure you can follow through?

We also posted our first Transparency Report

googleprojectzero.blogspot.com/p/reporting-...

(🔥🔥🔥)

While most vendors ship timely patches for vulnerabilities reported by Project Zero, they don’t always reach users. Today, we’re announcing Reporting Transparency, a new policy to encourage downstream fixes

googleprojectzero.blogspot.com/2025/07/repo...

maybe there's still some good left in this world after all

The new Tamagotchi Switch game has rap battles where the Tamas rap about how they respect and enjoy each others’ unique differences

Inventor of the GIF, hearing about Notre Dame burning: oh no the jarjoyles

I accidentally closed a browser yesterday with 72 VERY IMPORTANT TABS that have been following me around like Jacob Marley and somehow my history is not recoverable. Reader, I let them go, and have lived to tell the tale.

At least 3 miles of protesters along El Camino in Sunnyvale

I Googled “how to shorten a chain,” and got no good answers, so here’s the answer, here’s how you temporarily shorten it

www.ibiblio.org/harris/500mi...

You might be one of the lucky people to learn today about an emailing bug that turned out to be caused by the speed of light.

If there’s one thing I’ve learned, it’s that tab completion is never “just broken today”

Looks like I picked the wrong week to cut back on social media (Airplane movie meme)

If $106,050.10 was the size of a quarter, it would fit in 424,200.4 fewer shipping containers than …

The world never says hello back

The Windows Registry Adventure #8: Practical exploitation of hive memory corruption Posted by Mateusz Jurczyk, Google Project Zero In the previous blog post , we focused on the general security analysis of the registry a...

The final part of Mateusz’s Windows Registry series is live! Contains all the hive memory corruption exploitation you’ve been waiting for

googleprojectzero.blogspot.com/2025/05/the-...

🚨 CALLING ALL VULNERABILITY RESEARCHERS 🚨

The Junkyard is officially open!

This is our live, on-stage pwnathon dedicated to end-of-life systems. Submit your bugs!

Prizes range from $100 to $5,000 for categories like:
☄️ Most Impactful System
👾 Best Meme Target
👏 Most Engaging Presentation

Movie you've watched more than 1000 times using gifs.

("Hard mode" no Star Wars, Star Trek, or LoTR)

Should be a Canada goose