Targeting and Compromise of French Entities Using the Turla Intrusion Set (13 juillet 2026)
Version française: 🇫🇷 Members of the Cyber Crisis Coordination Centre (C4) have observed the targeting and compromise of French entities…
2026
Multiples vulnérabilités dans Mattermost Server (29 juin 2026)
De multiples vulnĂ©rabilitĂ©s ont Ă©tĂ© dĂ©couvertes dans Mattermost Server. Elles permettent Ă un attaquant de provoquer un problème de sĂ©curitĂ©…
[Mà j] Vulnérabilité dans Microsoft Exchange Server (15 mai 2026)
[Mise Ă jour du 11 juin 2026] Le 9 juin 2026, Microsoft a publiĂ© des versions correctives. [Publication initiale] Le…
Protecting Microsoft at AI speed: How SFI proactively hardens our cloud
At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Future Initiative (SFI), to guide what…
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
GigaWiper, also tracked as BLUERABBIT, is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational…
Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative
Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity. The post Securing our…
Welcome to the new Project Zero Blog
While on Project Zero, we aim for our research to be leading-edge, our blog design was … not so much….
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
Over the past few years, several AI-powered features have been added to mobile phones that allow users to better search…
A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave
With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what kind of Linux…
A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
While our previous two blog posts provided technical recommendations for increasing the effort required by attackers to develop 0-click exploit…