Announcing Project Zero
Summary: Google announced Project Zero on July 15, 2014, a well-staffed team of security researchers working 100% of their time on improving security across the Internet, following part-time research that led to discoveries such as Heartbleed. The team commits to filing every bug it discovers in an external database, reporting bugs only to the software's vendor, and making reports public typically once a patch is available.
What you should know: The team's stated objective is to significantly reduce the number of people harmed by targeted attacks, citing zero-day exploits used against human rights activists and for industrial espionage, and its public bug database will let anyone monitor vendor time-to-fix performance.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026