Google Project Zero urges emergency mitigations before formal patches
AI summary
Google Project Zero says software vendors should prepare emergency mitigation mechanisms for actively exploited vulnerabilities, rather than relying only on faster formal patches. It outlines four approaches: feature flags, input filtering, alternative update channels, and hotpatching, while noting that testing remains necessary.
In-depth insight
The guidance highlights practical ways to reduce exposure while full vulnerability fixes are still being tested and deployed.