Introducing the In-the-Wild Series
Summary: Google Project Zero launched a six-part series on vulnerabilities it found being exploited in the wild, starting with a Q1 2020 watering hole attack by a highly sophisticated actor that ran two exploit servers, one targeting Windows users and one targeting Android. Both servers used Chrome exploits for initial remote code execution, the Chrome and Windows exploits included 0-days, the Android chains used publicly known n-day exploits, and the four 0-days found across the chains have been fixed by the appropriate vendors.
What you should know: The attackers sent back dozens of parameters from a victim's device before deciding whether to continue exploitation, and Project Zero could not determine what parameters drove the fast versus slow path - so a single renderer exploit can serve as a reconnaissance step your defenses never see.
Read the original at Google Project Zero ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026