One Byte to rule them all

Announcement post introducing Project Zero's redesigned blog, explaining the migration, new layout and features, and where readers can find the archive of past security research.

Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.

Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.

Part 6 of the Windows Registry Adventure series, examining kernel-mode registry objects and the additional attack surface they expose to privilege escalation research.

Part 5 of the Windows Registry Adventure series, dissecting the regf file format underlying registry hives, its parsing hazards, and why it matters for fuzzing.

How Project Zero evolved Project Naptime into Big Sleep, using large language models to find vulnerabilities in real-world software, with early results and observations.