What Google Blog shipped in 2024

Open source vulnerabilities, with more reach

Google Cloud has expanded its vulnerability detection capabilities for Artifact Registry by integrating with the Open Source Vulnerabilities (OSV) platform. This update enhances Artifact Analysis, a s…

Google Cloud has expanded the vulnerability detection capabilities of its Artifact Analysis service by integrating it with the Open Source Vulnerabilities (OSV) platform. This integration has added su

The story so far

Google's OSS-Fuzz project has achieved a significant milestone by using AI to discover 26 new vulnerabilities in open-source projects, including a critical vulnerability in the OpenSSL library (CVE-20…

Ballot SC080v3: Sunset the use of WHOIS to identify Domain Contacts and relying DCV Methods

The CA/Browser Forum has initiated Ballot SC080v3 to sunset the use of WHOIS for identifying domain contacts and relying Domain Control Validation (DCV) methods, including email, fax, SMS, postal mail…

AI-powered protection for your device the moment it is stolen

Google has introduced five new security protections for Google Messages on Android, emphasizing its commitment to user safety. These features include AI-powered filters and advanced security measures …

Google Online Security Blog: Pixel's Proactive Approach to Security: Addressing Vulnerabilities in Cellular Modems

Pixel has significantly hardened the security of its cellular baseband processors, particularly in the Pixel 9 series, to address rising vulnerabilities in cellular modems. The company highlights that…

Google Online Security Blog: Google & Arm - Raising The Bar on GPU Security

Google's Android Red Team and Arm have collaborated to enhance GPU security, particularly focusing on the Mali GPU, which is widely used in Android devices. The collaboration aimed to identify and add…

Memory Safety for Firmware

Google’s Android team announced a strategic initiative to incrementally deploy Rust in existing firmware codebases, prioritizing new and high-risk code to enhance memory safety. The approach leverages…

Google’s Android team has announced a strategic initiative to integrate Rust into existing firmware codebases, particularly targeting low-level firmware such as Trusty apps, to enhance memory safety a

Google’s Android team announced a strategic push to integrate Rust into existing firmware codebases, particularly targeting low-level firmware like Trusty apps, to enhance memory safety and reduce vul

Google's Android team announced a strategic initiative to incrementally introduce Rust programming language into existing firmware codebases to improve memory safety. The approach prioritizes replacin

Google’s Android team announced a strategic initiative to incrementally deploy Rust in existing firmware codebases, prioritizing new and high-risk code to enhance memory safety. The approach involves

Google’s Android team announced plans to expand the use of Rust, a memory-safe programming language, into existing firmware codebases to address critical security vulnerabilities. The initiative targe

Chromium Blog: Advancing Our Amazing Bet on Asymmetric Cryptography

Google has enabled the latest Kyber draft specification by default for TLS 1.3 and QUIC on all desktop Chrome platforms as of Chrome 124.2. This move is part of Google's broader strategy to prioritize…

Android’s theft protection features keep your device and data safe

Google has introduced a suite of advanced theft protection features for Android devices to enhance security before, during, and after theft incidents. The most critical change is the upgrade to factor…

Chromium Blog: Fighting cookie theft using device bound sessions

Google’s Chromium team has announced a new security initiative called Device Bound Session Credentials (DBSC), designed to combat the rising threat of cookie theft malware. The most critical change is…

Browse safely with real-time protection on Chrome

Google Chrome is enhancing its Safe Browsing feature with real-time protection to combat the increasing pace of cybersecurity threats. Previously, the Standard protection mode relied on a list updated…

Google Online Security Blog: Piloting new ways of protecting Android users from financial fraud

Google is piloting enhanced fraud protection for Android users to combat financial fraud, particularly from Internet-sideloaded apps. This initiative is a response to the increasing sophistication of …