Months after reporting its first vulnerabilities, Google officially acknowledges the existence of a shadowy security group known as Project Zero.