Project Zero Blog – News and updates from the Project Zero team at Google Security Research (01.10.2014): More Mac OS X and iPhone sandbox escapes and kernel bugs (new/open)

Project Zero Blog – News and updates from the Project Zero team at Google Security Research (30.07.2014): Mac OS X and iPhone sandbox escapes (fixed)

If you want a single URL to enumerate all of our publicly viewable bugs, click here .

[…]
Finding and eliminating sandbox escapes is an important focus for Project Zero. The attack surface to break out of a sandbox is often smaller than the attack surface available to remote attackers to gain an initial foothold inside a sandbox. Therefore, strengthening sandboxes represents a solid return on investment of time.

Our research seems to indicate that sandbox break-outs on OS X and iOS are an under-researched topic. We’d encourage others to join us in bringing these sandboxes up to strength.
[…]
(*) These bugs exceeded Project Zero’s standard 90-day disclosure deadline.
(+) These bugs were only fixed on iOS and remain unpatched on OS X.



Über Project Zero:
Project Zero Blog (15.07.2014): Announcing Project Zero

heise (15.07.2014): Google schickt Elite-Hacker auf die Jagd nach Sicherheitslücken
Unter "Project Zero" firmiert ein Team von Star-Hackern, das so genannten Zero-Day-Bugs schneller den Garaus machen soll, als sie neu entstehen. Einer davon ist der berühmte iPhone-, PS3-, Browser- und Android-Hacker Geohot.

Danke für den Link!