Project Zero compared Fuzzilli and BigSleep, two automated vulnerability-finding tools for Chrome's V8 JavaScript engine, over six months. BigSleep found slightly more bugs (45 vs 37), but with ~60% theoretical overlap, both approaches remain complementary. The report recommends vendors use both fuzzing and LLM-based analysis to maximize vulnerability discovery.
Background
Project Zero is Google's security research team focused on identifying zero-day vulnerabilities in widely used software. JavaScript engines like V8 are high-value fuzzing targets due to their complexity and exposure to user input.
- Source
- Lobsters
- Published
- Oct 28, 2026 at 03:08 AM
- Score
- 7.0 / 10