Google’s Project Zero bug-hunting hackers reveal seven active bugs in Windows
Featured ı By Jackie Allen
1,404 0 Comments
Project Zero the bug-hunters
In 2014, Google set up Project Zero, a team of top-notch bug-hunting and security researchers to find and disclose security flaws or bugs in the world’s software. “Our mission is to make the discovery and exploitation of security vulnerabilities more difficult and to significantly improve the safety and security of the Internet for everyone.” "We perform vulnerability research on popular software like mobile operating systems, web browsers, and open source libraries. We use the results from this research to patch serious security vulnerabilities, to improve our understanding of how exploit-based attacks work, and to drive long-term structural improvements to security," according to Project Zero in a blog. In the last 6 years, researchers at Project Zero have helped find and fix almost 2000 vulnerabilities in some of the world’s most widely-used and popular software. With the number of hacks increasing, the security researchers have their work cut out for them. When Project Zero finds a security flaw they typically give Microsoft a seven-day deadline to patch the vulnerability. Project Zero typically does a public disclosure after 90 days or when a “fix” is developed, whichever happens first.The active exploits are disclosed
The bug disclosure last month came prior to a patch being available. Project Zero announced that “ We have evidence that the following bug is being used in the wild. In other words, hackers were currently using the bugs to hack some current Windows users. Therefore, this bug is subject to a 7-day disclosure deadline.” “The Windows Kernel Cryptography Driver (cng.sys) exposes a \Device\CNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures,” the Project Zero post said. “It constitutes a locally accessible attack surface that can be exploited for privilege escalation (such as sandbox escape).” Shane Huntley, Director of Google’s Threat Analysis Group was quick to announce that, “that this is targeted exploitation and this is not related to any US election-related targeting.” As the vulnerability, CVE-2020-17087 was tracked it became clear that it allowed attackers to escalate and obtain system privileges. This security bug only affected Windows 7 and Windows 10. The hack attackers were using a combination of two exploits which targeted a previously patched flaw in Chrome. This allowed the first malicious exploit to escape a security sandbox in order to allow the second to execute code on vulnerable machines.Microsoft patched the bug got
Project Zero technical lead Ben Hawkes explained that the disclosure was made early in order to protect existing users who were being exploited.
FOLLOW US
Recent Posts
Kelly Warner Law Firm Blames USA Herald for Arizona Bar…
Aaron Kelly Law Firm Resorts To Attacking Former Client Again…
Arizona Bar Opens Investigation on Attorney Aaron Kelly
Rhoda AI Secures $450M Funding to Power Next-Gen Industrial Robots
ExxonMobil to Move to Texas in Historic Corporate Shift
US Consulate Shooting in Toronto Triggers National Security Investigation
Alabama Man Fatal Shooting Death Sentence Commuted by Governor
Winklevoss Twins’ Bitcoin Transfer Sparks Market Speculation
Medtronic to Buy Scientia Vascular in $550 Million Neurovascular Deal
Google and Tesla Power Grid Initiative Targets Lower Energy Costs
Don’t Miss It
Kelly Warner Law Firm Blames USA Herald for Arizona Bar Investigation
By – USA HeraldAaron Kelly Law Firm Resorts To Attacking Former Client Again On KellyWarnerLaw.com – Pattern Recognized
By – Jeff WattersonArizona Bar Opens Investigation on Attorney Aaron Kelly
By – Paul O'NealRhoda AI Secures $450M Funding to Power Next-Gen Industrial Robots
By – Rachel MooreExxonMobil to Move to Texas in Historic Corporate Shift
By – Rachel MooreUS Consulate Shooting in Toronto Triggers National Security Investigation
By – Rachel MooreAlabama Man Fatal Shooting Death Sentence Commuted by Governor
By – Rachel MooreWinklevoss Twins’ Bitcoin Transfer Sparks Market Speculation
By – Rachel MooreMedtronic to Buy Scientia Vascular in $550 Million Neurovascular Deal
By – Rihem AkkoucheGoogle and Tesla Power Grid Initiative Targets Lower Energy Costs
By – Rihem AkkoucheJupiter’s Shift Direction Lights Up the Night Sky Again
By – Rihem Akkouche
Kelly Warner Law Firm Blames USA Herald for Arizona Bar Investigation
In what appears as a desperate attempt to defend multiple allegations of fraud on the courts, the Kelly Warner Law…
By – USA Herald
Aaron Kelly Law Firm Resorts To Attacking Former Client Again On KellyWarnerLaw.com – Pattern Recognized
Attorney Aaron Kelly and his law partner Daniel Warner are currently under investigation by the Arizona Bar for legal misconduct.…
By – Jeff Watterson
Arizona Bar Opens Investigation on Attorney Aaron Kelly
USA Herald recently reported on a developing story involving Attorneys Daniel Warner and Aaron Kelly. Both Warner and Kelly have…
By – Paul O'Neal
Rhoda AI Secures $450M Funding to Power Next-Gen Industrial Robots
In a move set to electrify the robotics industry, Rhoda AI $450M funding marks one of the largest early-stage investments…
By – Rachel Moore
ExxonMobil to Move to Texas in Historic Corporate Shift
In a move that could reshape the corporate map of one of America’s most powerful energy companies, ExxonMobil to move…
By – Rachel Moore
US Consulate Shooting in Toronto Triggers National Security Investigation
Authorities in Canada are investigating the US consulate shooting in Toronto after gunfire struck the diplomatic building early Monday morning…
By – Rachel Moore
Alabama Man Fatal Shooting Death Sentence Commuted by Governor
In a rare act of clemency that halted an imminent execution, the Alabama man fatal shooting death sentence tied to…
By – Rachel Moore
Winklevoss Twins’ Bitcoin Transfer Sparks Market Speculation
A wave of cryptocurrency movement tied to the founders of the Gemini exchange is drawing fresh attention across the digital…
By – Rachel Moore
Medtronic to Buy Scientia Vascular in $550 Million Neurovascular Deal
In a move poised to reshape the future of stroke treatment technology, Medtronic to buy Scientia Vascular marks a major…
By – Rihem Akkouche
Rhoda AI Secures $450M Funding to Power Next-Gen Industrial Robots
In a move set to electrify the robotics industry, Rhoda AI $450M funding marks one of the largest early-stage investments…
By – Rachel Moore
ExxonMobil to Move to Texas in Historic Corporate Shift
In a move that could reshape the corporate map of one of America’s most powerful energy companies, ExxonMobil to move…
By – Rachel Moore
US Consulate Shooting in Toronto Triggers National Security Investigation
Authorities in Canada are investigating the US consulate shooting in Toronto after gunfire struck the diplomatic building early Monday morning…
By – Rachel Moore
Alabama Man Fatal Shooting Death Sentence Commuted by Governor
In a rare act of clemency that halted an imminent execution, the Alabama man fatal shooting death sentence tied to…
By – Rachel Moore
Winklevoss Twins’ Bitcoin Transfer Sparks Market Speculation
A wave of cryptocurrency movement tied to the founders of the Gemini exchange is drawing fresh attention across the digital…
By – Rachel Moore
Medtronic to Buy Scientia Vascular in $550 Million Neurovascular Deal
In a move poised to reshape the future of stroke treatment technology, Medtronic to buy Scientia Vascular marks a major…
By – Rihem Akkouche
Rhoda AI Secures $450M Funding to Power Next-Gen Industrial Robots
In a move set to electrify the robotics industry, Rhoda AI $450M funding marks one of the largest early-stage investments…
By – Rachel Moore
ExxonMobil to Move to Texas in Historic Corporate Shift
In a move that could reshape the corporate map of one of America’s most powerful energy companies, ExxonMobil to move…
By – Rachel Moore
US Consulate Shooting in Toronto Triggers National Security Investigation
Authorities in Canada are investigating the US consulate shooting in Toronto after gunfire struck the diplomatic building early Monday morning…
By – Rachel Moore
Alabama Man Fatal Shooting Death Sentence Commuted by Governor
In a rare act of clemency that halted an imminent execution, the Alabama man fatal shooting death sentence tied to…
By – Rachel Moore
Winklevoss Twins’ Bitcoin Transfer Sparks Market Speculation
A wave of cryptocurrency movement tied to the founders of the Gemini exchange is drawing fresh attention across the digital…
By – Rachel Moore
Medtronic to Buy Scientia Vascular in $550 Million Neurovascular Deal
In a move poised to reshape the future of stroke treatment technology, Medtronic to buy Scientia Vascular marks a major…
By – Rihem Akkouche
The Northern Lights Return
The Northern Lights have a chance to be visible from several northern U.S. states on Tuesday night, forecasters at the…
By – Jackie Allen
February Unemployment Up as Job Losses Surprise Economists
February Unemployment Up as the latest labor market data revealed weaker-than-expected job growth and a slight increase in the national…
By – Jackie Allen
Late-Night Attack by Venezuelan National at Florida Beach
A Late-night attack by a Venezuelan National has left a Florida community shaken after authorities say a 26-year-old man ambushed…
By – Jackie Allen
Trump’s War in Iran: Congress Confronts Escalation After U.S. Strikes
Trump’s War in Iran was triggered open conflict, casualties, and renewed constitutional debate in Washington. The crisis intensified following reports…
By – Jackie Allen
U.S. And Israel Launch Major Strikes On Iran — What It Means For America
TEHRAN, Iran – In a dramatic escalation of global tensions, the United States and Israel launched coordinated military strikes against Iran…
By – Samuel Lopez
U.S. Court of Appeals for the Ninth Circuit Overturns $8M Asbestos Verdict Against BNSF Railway Co.
The U.S. Court of Appeals for the Ninth Circuit has thrown out an $8 million jury verdict against BNSF Railway…
By – Tyler Brooks
Rhoda AI Secures $450M Funding to Power Next-Gen Industrial Robots
In a move set to electrify the robotics industry, Rhoda AI $450M funding marks one of the largest early-stage investments…
By – Rachel Moore
ExxonMobil to Move to Texas in Historic Corporate Shift
In a move that could reshape the corporate map of one of America’s most powerful energy companies, ExxonMobil to move…
By – Rachel Moore
US Consulate Shooting in Toronto Triggers National Security Investigation
Authorities in Canada are investigating the US consulate shooting in Toronto after gunfire struck the diplomatic building early Monday morning…
By – Rachel Moore
Alabama Man Fatal Shooting Death Sentence Commuted by Governor
In a rare act of clemency that halted an imminent execution, the Alabama man fatal shooting death sentence tied to…
By – Rachel Moore
Winklevoss Twins’ Bitcoin Transfer Sparks Market Speculation
A wave of cryptocurrency movement tied to the founders of the Gemini exchange is drawing fresh attention across the digital…
By – Rachel Moore
Medtronic to Buy Scientia Vascular in $550 Million Neurovascular Deal
In a move poised to reshape the future of stroke treatment technology, Medtronic to buy Scientia Vascular marks a major…
By – Rihem Akkouche
When The Files Are Finally Unsealed The Most Mind-Bending Truth May Not Be What We Expect
[USA HERALD] – There is a widespread assumption that if governments release their most highly classified files related to unidentified…
By – Samuel Lopez
Civil Rights Icon Rev. Jesse Jackson Dies at 84 As President Trump Issues Personal Tribute
[USA HERALD] — The Rev. Jesse Jackson, a towering figure of the American civil rights movement whose career spanned more than…
By – Samuel Lopez
Clues to Savannah Guthrie Missing Mom’s Disappearance Found on Security System
The disappearance of the mother of Savannah Guthrie has taken a dramatic turn as investigators focus on digital clues tied…
By – Jackie Allen
Mike Tyson Urges Americans to ‘Eat Real Food’ in Emotional Super Bowl Ad Highlighting Health Risks
Boxing legend Mike Tyson is using his platform ahead of Super Bowl 60 to address a personal and national health…
By – Tyler Brooks
Deadly “Death Cap” Mushrooms in California Cause Multiple Deaths and Liver Transplants Amid Rare Super Bloom
California health officials are warning the public after four deaths and three liver transplants linked to the highly toxic death…
By – Ahmed Boughalleb
From Migraines to Miracles: How Becca Valle Survived a Glioblastoma Diagnosis Against the Odds
Becca Valle, 41, thought her headaches were just migraines—until a sudden, unbearable pain revealed something far more serious. In September…
By – Tyler Brooks
February Unemployment Up as Job Losses Surprise Economists
February Unemployment Up as the latest labor market data revealed weaker-than-expected job growth and a slight increase in the national…
By – Jackie Allen
Late-Night Attack by Venezuelan National at Florida Beach
A Late-night attack by a Venezuelan National has left a Florida community shaken after authorities say a 26-year-old man ambushed…
By – Jackie Allen
Trump’s War in Iran: Congress Confronts Escalation After U.S. Strikes
Trump’s War in Iran was triggered open conflict, casualties, and renewed constitutional debate in Washington. The crisis intensified following reports…
By – Jackie Allen
Cadillac Names Inaugural Formula 1 Car MAC-26 in Tribute to Mario Andretti Ahead of 2026 Australian Grand Prix Debut
Cadillac has officially revealed the name of its first Formula 1 challenger, confirming that its 2026 car will be called…
By – Ahmed Boughalleb
Norway Tops Medal Table After Day 13 at 2026 Winter Olympics as Team USA Surges Into Second Place
With 13 days complete at the 2026 Milan Cortina Winter Olympics, Norway sits atop the overall medal standings, collecting 34…
By – Ahmed Boughalleb
Olympic Science Explained: How Figure Skaters Spin at Blinding Speeds Without Getting Dizzy
When Amber Glenn finishes her routine, the arena usually rises with her. The music builds, her blades carve a tight…
By – Tyler BrooksNo posts found.
No posts found.
No comments yet. Be the first to comment!