We will describe some of the surprising discoveries by researchers submitting to the Zero Day Initiative program, which were used to verify the application hardening as it occurred. Over the years, this multi-pronged approach eliminated a large set of vulnerabilities resident in a security model implemented in a JavaScript engine.

By Abdul-Aziz Hariri and Edgar Pek

Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefi...