Google, Microsoft work together for a year to figure out new type of Windows flaw  Ars Technica

One of the more notable features of Google Project Zero’s (GPZ) security research has been its 90-day disclosure policy. In general, vendors are given 90 days …