2023 年热门更新
2023年12月
- Securitysecurity.googleblog.com
An increasingly popular attack surface
Google’s Android Security team has announced a proactive initiative to harden cellular basebands in Android devices by deploying two Clang-based sanitizers—Integer Overflow Sanitizer (IntSan) and Boun…
- Launchblog.google
Introducing Gemini: our largest and most capable AI model
Google has introduced Gemini, its largest and most capable AI model, marking a significant milestone in AI development. Gemini is designed to be multimodal, understanding and operating across text, co…
2023年11月
- Partnershipsecurity.googleblog.com
Google Online Security Blog: app security
The App Defense Alliance (ADA), launched by Google in 2019 to combat app-based malware and enhance Android security, has undergone a significant strategic shift by transitioning under the Linux Founda…
2023年8月
- Featureblog.chromium.org
Chromium Blog: Protecting Chrome Traffic with Hybrid Kyber KEM
Chrome is introducing support for X25519Kyber768, a hybrid cryptographic mechanism, to protect traffic against future quantum computing threats. This update, starting in Chrome 116, combines the widel…
2023年7月
- Technicalsecurity.googleblog.com
Google Online Security Blog: encryption
Google has announced its support for the IETF’s Message Layer Security (MLS) specification (RFC 9420) to enable practical interoperability across messaging platforms, addressing a key limitation where…
2023年5月
- Integrationsecurity.googleblog.com
Google Online Security Blog: chrome enterprise
Google has enhanced Chrome Browser Cloud Management by integrating Splunk’s automated security remediation capabilities, enabling enterprises to respond faster to security threats detected in Chrome b…
2023年4月
- Technicalsimonwillison.net
Simon Willison’s Weblog
Simon Willison proposes a 'Dual LLM' pattern to address prompt injection vulnerabilities in AI assistants. The pattern involves two LLM instances: a Privileged LLM for trusted tasks and a Quarantined …
2023年3月
- Securityprojectzero.google
Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
Project Zero, Google’s security research team, disclosed eighteen 0-day vulnerabilities in Samsung Semiconductor’s Exynos Modems, with four (CVE-2023-24033, CVE-2023-26496, CVE-2023-26497, CVE-2023-26…
2023年2月
- Technicalsecurity.googleblog.com
Google Online Security Blog: connected devices
Google highlights progress in harmonized connected device security standards ahead of Mobile World Congress, emphasizing the launch of a new smartphone security certification program in collaboration …