Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Big changes to Android and Chrome VRP:
- focus on high-impact, reproducible bugs with low/no reward for lower impact
- big prizes for full chains with some annual limits
- PoCs required
It’s the end of an era, but the start of a new one.
https://bughunters.google.com/blog/evolving-the-android-chrome-vrps-for-the-ai-era
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.
https://projectzero.google/2026/01/pixel-0-click-part-1.html
Tamagotchi hacker. Google Project Zero. she/her
Tamagotchi hacker. Google Project Zero. she/her
While most vendors ship timely patches for vulnerabilities reported by Project Zero, they don’t always reach users. Today, we’re announcing Reporting Transparency, a new policy to encourage downstream fixes
https://googleprojectzero.blogspot.com/2025/07/reporting-transparency.html