← Front PageResearch Desk
Research
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
Zero-click Pixel 9 exploit chain exploits AI-powered message features, expanding mobile attack surface through media processing.
Summary written by editorial AI · Source link below
Over the past few years, several AI-powered features have been added to mobile phones that allow users to better search and understand their messages. One effect of this change is increased 0-click attack surface, as efficient analysis often requires message media to be decoded before the message is opened by the user. One such feature is audio transcription. Incoming SMS and RCS audio attachments received by Google Messages are now automatically decoded with no user interaction. As a result, au
Continue at the source
Read the full report at Project ZeroExternal link — opens at Project Zero in a new tab.
§
Continue with
More from the Research Desk
- Firecracker VM Escape: PwnEscape Part 23d
- A Gingerbread House for LLM Agents: Source-Planned Honeypots That Lure Autonomous Attackers into an Isolated Shadow3d
- LABBA: LLM-Assisted Behavioral Biometric Authentication3d
- A Cyber Range Evaluation of Inductive Autonomous Network Incident Response Agents3d
- KeHoSu: Keyed Homoglyph Substitution for Authenticated Text Provenance over Copy-Paste Channels3d