Attackers are exploiting the same types of software vulnerabilities over and over again, because companies often miss the forest for the trees.

In December 2018, researchers at Google detected a group of hackers with their sights set on Microsoft’s Internet Explorer. Even though new development was shut down two years earlier it’s such a common browser that if you can find a way to hack it, you’ve got a potential open door to billions of computers.

The hackers were hunting for, and finding, previously-unknown flaws, known as zero-day vulnerabilities.

Google’s security team known as Project Zero,  spotlights multiple examples of zero-days, including problems that Google itself has had with its popular Chrome browser.  Read More

Project Zero

1. Introducing the In-the-Wild Series
2. Chrome: Infinity Bug
3. Chrome Exploits
4. Android Exploits
5. Android Post-Exploitation
6. Windows Exploits