Part 2 of @tiraniddo.dev’s Windows Administrator Protection journey is here! projectzero.google/2026/02/wind...
Bypassing Administrator Protection by Abusing UI Access - Project Zero
In my last blog post I introduced the new Windows feature, Administrator Protection and how it aimed to create a secure boundary for UAC where one didn’t exi...
projectzero.google
Oh hey, we're [finally] killing RC4 everywhere officially. www.microsoft.com/en-us/window...
Beyond RC4 for Windows authentication
As organizations face an evolving threat landscape, strengthening Windows authentication is more critical than ever.
microsoft.com
What's new in Windows Security blogs.windows.com/windowsexper...
Preparing for what’s next: Windows security and resiliency innovations help organizations mitigate risks, recover faster and prepare for the era of AI
Today, we introduced agentic platform and cloud-powered flexibility capabilities into Windows that bring together human creativity and intelligent agents. To fully embrace these ag
blogs.windows.com
advice to every Rust organizational decisionmaker out there: shut up, stop making excuses, and take notes from the PSF: bsky.app/profile/pyth...
Python Software Foundation@python.org · 9mo agoTLDR; The PSF has made the decision to put our community and our shared diversity, equity, and inclusion values ahead of seeking $1.5M in new revenue. Please read and share. pyfound.blogspot.com/2025/10/NSF-... 🧵
Memory tagging coming to x86: community.intel.com/t5/Blogs/Tec...
ChkTag: x86 Memory Safety
ChkTag: x86 Memory Safety Memory safety violations due to programming errors have long afflicted software. Industry and academia have been searching for solutions to this problem. As first noted in ...
community.intel.com
Over the summer we published documentation for the new usermode accessor APIs that we will be making all drivers use going forward. We’ve now ported over 2/3rd of our usermode accesses in kernel code to use these APIs and the rest is in progress! learn.microsoft.com/en-us/window...
User-mode Accessors - Windows drivers
Learn about user-mode accessors that provide safe access to user-mode memory from kernel-mode code
learn.microsoft.com
I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓
Bypassing kASLR via Cache Timing : r0keb.github.io/posts/Bypass... kASLR Internals and Evolution : r0keb.github.io/posts/kASLR-... credits @r0keb
Important news: Microsoft is working to bring SMAP into Windows www.youtube.com/watch?v=-3jx... Great talk by Joe Bialek from MORSE team
BlueHat 2024: S09: Pointer Problems – Why We’re Refactoring the Windows Kernel
YouTube video by Microsoft Security Response Center (MSRC)
youtube.com
New blog post on the abuse of the IDispatch COM interface to get unexpected objects loaded into a process. Demoed by using this to get arbitrary code execution in a PPL process. googleprojectzero.blogspot.com/2025/01/wind...
Windows Bug Class: Accessing Trapped COM Objects with IDispatch
Posted by James Forshaw, Google Project Zero Object orientated remoting technologies such as DCOM and .NET Remoting make it very easy ...
googleprojectzero.blogspot.com
In the past 6 months we’ve ported over 2,000 usermode accesses in ntoskrnl and securekernel to usermode accessors and discovered and fixed a handful of vulnerabilities in the process. I never thought we’d see such large scale refactoring
Simple 3 steps to boot Arm64 WinVOS in QEMU (emulation mode). linaro.atlassian.net/wiki/spaces/... Boots in under a minute.
windows-arm64 VM using qemu-system - Windows On Arm (WOA) - Confluence
linaro.atlassian.net
TIL we published WinVOS, a super lightweight Windows SKU. This is a great way to debug ultra hot system calls and other things that are just too noisy on a full version of Windows. I use it for development. learn.microsoft.com/en-us/window...
Microsoft Validation OS
Microsoft Validation OS
learn.microsoft.com
More usermode accessor improvements are landing in Windows 😊
Work-around for long-term issue in Cygwin's fork() running on Arm64 resolved. Really appreciate the energy and collaboration with the @msys2org.bsky.social folks!
