Amazing write-up of security exploits found in iOS: https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html
(Found in the wild and used indiscriminately! These weren't targeted attacks.)
miniblog.
Related Posts
Adding LLVM control flow integrity to make exploits harder is coming to Rust: https://rcvalle.com/docs/rust-cfi-design-doc.pdf
The primary use case is mixing C/C++ with Rust: you have weaker memory safety guarantees and hardening is still necessary. You don't want a partial Rust port to reduce security!
It's the logical progression of vulnerabilities, but the weaponisation of zero-day exploits with no user interaction is scary.
https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hacked-with-suspected-nso-group-imessage-zero-click-exploit/
Deep dive on the Fuchsia kernel, ots architecture, and how it is hardened against exploits: