Google's Project Zero just embarrassed Microsoft yet again. Project Zero is a security directive built to fight hackers who take advantage of "zero-day exploits." A zero-day exploit is simply any newly discovered security flaw or bug that software developers haven't had time to fix.
Developers at companies like Microsoft and Google are constantly working to track down and patch holes in their programs' security. That's why zero-day exploits are so scary: there's no knowing how long hackers have known about them before they get fixed. Remember Heartbleed? That was a zero-day bug that we know had been exploited prior to the fix becoming available.
But back to Google's Project Zero. Any bug found under the Project Zero umbrella is reported to the company that it affects. The company then has 90 days to fix the bug before Project Zero announces it publicly.
Google already released one zero-day exploit before Microsoft had a chance to fix it. The resulting sniping between the two companies was funny to watch.
Microsoft called Project Zero "gotcha" tactics, and Google denied the claims.
Now, Microsoft is under the gun again. Google has just revealed two dangerous exploits against Microsoft's operating systems.