Google Project Zero
Google旗下专注于零日漏洞研究的精英安全团队，通过主动发现各类软件和系统的安全漏洞来提升互联网整体安全水平，确立了90天负责任披露的行业标准
Core Facts
Timeline (last 90 days)
Google's Project Zero team and DARPA's AIxCC competition have demonstrated that AI can achieve efficiency in vulnerability mining several times to dozens of times greater than that of human experts.
Google Project Zero used a large model to discover a real zero-day vulnerability in SQLite.
责任披露文化源自20世纪90年代的网络安全社区，已被CERT/CC、Google Project Zero等机构制度化，通常给予90天修复窗口期
All Facts (6)
The responsible disclosure standard remediation window for Google Project Zero is typically 90 days.
90%VerifiedAccording to statistics from Google Project Zero, more than 90 zero-day vulnerabilities were actively exploited globally in 2023.
65%Unverified2023年全年被追踪到的在野零日利用超过90个，呈逐年上升趋势
75%UnverifiedGoogle's Project Zero team and DARPA's AIxCC competition have demonstrated that AI can achieve efficiency in vulnerability mining several times to dozens of times greater than that of human experts.
50%UnverifiedGoogle Project Zero used a large model to discover a real zero-day vulnerability in SQLite.
50%Unverified责任披露文化源自20世纪90年代的网络安全社区，已被CERT/CC、Google Project Zero等机构制度化，通常给予90天修复窗口期
50%