https://blog.google/security/Securityen-usWed, 21 Oct 2026 17:00:00 +0000https://blog.google/security/static/blogv2/images/google.pnghttps://blog.google/security/https://blog.google/security/chrome-now-warns-before-insecure-http-connections/Image of two browser windows, one marked not secure and one marked secure<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Chrome_Launch_of_https_Blog_Hea.max-600x600.format-webp.webp">As promised last year, we have now rolled out a change where Chrome explicitly asks users for permission before making an insecure HTTP connection. Earlier this year we …Wed, 21 Oct 2026 17:00:00 +0000https://blog.google/security/chrome-now-warns-before-insecure-http-connections/Chrome SecurityChromeSecurityarticleAs promised last year, we have now rolled out a change where Chrome explicitly asks users for permission before making an insecure HTTP connection. Earlier this year we enabled this feature for users enrolled in Chrome's Enhanced Protection mode of Safe Browsing, and now we extended this protection to all users by default.Googlehttps://blog.google/security/chrome-now-warns-before-insecure-http-connections/Joe DeBlasio, Eric Trouton, Chris Thompson, Serena Chen, Mustafa Emre Acer, and Carlos Joan Rafael Ibarra Lopez, from Chrome's Secure Web and Networking Teamhttps://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/The Chrome Root Program received a report from a security researcher regarding the compromise of private keys associated with eight eMudhra subordinate Certification Aut…Tue, 20 Oct 2026 19:49:00 +0000https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/Android SecurityChrome SecurityarticleThe Chrome Root Program received a report from a security researcher regarding the compromise of private keys associated with eight eMudhra subordinate Certification Authority (CA) certificates. The team subsequently landed a CRLSet update blocking the Subject Public Key Info (SPKI) hashes of the affected intermediate CAs. Because this CRLSet update blocks by SPKI, Chrome users were immediately protected against all certificates sharing those keys, without requiring a browser update or restart.Googlehttps://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/Chrome and Android Security Teamshttps://blog.google/security/our-latest-defenses-against-evolving-web-scams/shield connecting to two laptops, one with a login page and another with a red warning<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Scam_Roundup_BlogHeaders_Option.max-600x600.format-webp.webp">Google Chrome's Enhanced Protection mode makes users ten times safer from phishing, social engineering, and other attacks when compared to Standard Protection mode. Buil…Tue, 20 Oct 2026 17:00:00 +0000https://blog.google/security/our-latest-defenses-against-evolving-web-scams/Chrome SecuritySecurityarticleGoogle Chrome's Enhanced Protection mode makes users ten times safer from phishing, social engineering, and other attacks when compared to Standard Protection mode. Building on this, a new 2026 update introduces "suspicious site warnings" that proactively flag deceptive web patterns to help users avoid potential harm.Googlehttps://blog.google/security/our-latest-defenses-against-evolving-web-scams/Jasika Bawahttps://blog.google/security/new-android-scam-protections/Android logo with two stats: 1) Over 5 million suspected scam calls and massages flagged each month and 2) highest level of built-in scam protection<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Hero_Image_w__2_Stats.max-600x600.format-webp.webp">Android is rolling out new defenses powered by Google AI to help keep you safe from scams and fraudWed, 14 Oct 2026 17:00:00 +0000https://blog.google/security/new-android-scam-protections/Android SecurityAndroidarticleAndroid is rolling out new defenses powered by Google AI to help keep you safe from scams and fraudGooglehttps://blog.google/security/new-android-scam-protections/Alberto Pastor NietoShaifali Bhandarihttps://blog.google/security/enabling-the-next-gen-enclave-architecture-for-on-device-ai-on-android/Enabling the Next-Gen Enclave Architecture for On-Device AI on Android<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Hero_Image_hI0LPa1.max-600x600.format-webp.webp">Devices are shifting from collections of standalone apps into proactive, personal assistants that anticipate needs, streamline complex tasks, and act on our behalf. To m…Wed, 07 Oct 2026 09:43:00 +0000https://blog.google/security/enabling-the-next-gen-enclave-architecture-for-on-device-ai-on-android/Android SecuritySecurityarticleGooglehttps://blog.google/security/enabling-the-next-gen-enclave-architecture-for-on-device-ai-on-android/Irene AngAndroid Virtualization & AISealHelen Jianghttps://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/Following recent third-party domain hijacks affecting the .gh, .sl, and .as country-code top-level domains (ccTLDs), Chrome immediately blocked unauthorized HTTPS certif…Tue, 06 Oct 2026 11:53:00 +0000https://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/Chrome SecurityChromearticleFollowing recent third-party domain hijacks affecting the .gh, .sl, and .as country-code top-level domains (ccTLDs), Chrome immediately blocked unauthorized HTTPS certificates via CRLSets and worked with issuing Certification Authorities to revoke them. Using Certificate Transparency (CT) logs, Chrome also proactively identified and blocked certificates for other impacted organizations. While Chrome users are automatically protected without needing to take action, we strongly encourage domain owners to monitor CT logs across their entire domain portfolio and publish restrictive CAA records to safeguard their namespaces.Googlehttps://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/Chrome Secure Web and Networking Teamhttps://blog.google/security/android-advanced-protection-updates/A woman with Advanced Protection on Android enabled on her phone<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Hero_Image_5.max-600x600.format-webp.webp">Discover new Advanced Protection features on Android designed to defend against sophisticated threats and keep your data safe.Thu, 01 Oct 2026 16:00:00 +0000https://blog.google/security/android-advanced-protection-updates/Android SecurityarticleDiscover new Advanced Protection features on Android designed to defend against sophisticated threats and keep your data safe.Googlehttps://blog.google/security/android-advanced-protection-updates/Il-Sung Leehttps://blog.google/security/agentic-hacks-real-proofs-inside-googles-pagebreak-project/Security landscape in 2026The application of Large Language Models (LLMs) to security scanning has revolutionized the vulnerability management landscape. But, it has als…Thu, 24 Sep 2026 01:00:00 +0000https://blog.google/security/agentic-hacks-real-proofs-inside-googles-pagebreak-project/SecurityarticleGooglehttps://blog.google/security/agentic-hacks-real-proofs-inside-googles-pagebreak-project/Michał Bentkowskihttps://blog.google/security/android-security-state-libraries/Security State Library<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/AndroidX_Security_State_Library.max-600x600.format-webp.webp">New Android libraries give enterprises and OEMs a clear, unified view of a device's security status across all system components.Thu, 17 Sep 2026 20:00:00 +0000https://blog.google/security/android-security-state-libraries/Android SecuritySecurityarticleNew Android libraries give enterprises and OEMs a clear, unified view of a device's security status across all system components.Googlehttps://blog.google/security/android-security-state-libraries/Maunik ShahAlec GarciaJoseph Yonghttps://blog.google/security/android-strongbox-and-open-standards-digital-credentials/Checking phone to see image of digital credential<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Hero_Image_1_fTVQwRg.max-600x600.format-webp.webp">Learn how Android Strongbox and the new Digital Credential Alliance secure mobile wallets and digital IDs globally.Tue, 01 Sep 2026 12:00:00 +0000https://blog.google/security/android-strongbox-and-open-standards-digital-credentials/Android SecuritySecurityarticleLearn how Android Strongbox and the new Digital Credential Alliance secure mobile wallets and digital IDs globally.Googlehttps://blog.google/security/android-strongbox-and-open-standards-digital-credentials/Eric LynchVictor HsiehJason Wonghttps://blog.google/security/new-android-network-security-protections/Android bot with a shield protecting the network<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Keyword_NetworkSecurity_2784x15.max-600x600.format-webp.webp">We’re introducing a suite of advanced network security features that secure your connections, defend against cellular vulnerabilities, and help keep your home network pr…Thu, 27 Aug 2026 14:00:00 +0000https://blog.google/security/new-android-network-security-protections/Android SecuritySecurityarticleWe’re introducing a suite of advanced network security features that secure your connections, defend against cellular vulnerabilities, and help keep your home network private.Googlehttps://blog.google/security/new-android-network-security-protections/Bram BonnéShuaibo Huanghttps://blog.google/security/how-google-is-making-private-ai-practical-with-homomorphic-encryption/heir logo<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Untitled_design_10_p3wN1dg.max-600x600.format-webp.webp">Today we're excited to showcase HEIR, the latest powerful tool added to our Private Computing Toolkit. HEIR is an open source compiler that unlocks cryptographically-sec…Fri, 14 Aug 2026 14:00:00 +0000https://blog.google/security/how-google-is-making-private-ai-practical-with-homomorphic-encryption/SecurityarticleGooglehttps://blog.google/security/how-google-is-making-private-ai-practical-with-homomorphic-encryption/Jeremy Kunhttps://blog.google/security/the-evolving-role-of-the-red-team-in-the-era-of-agentic-security/At Google, our Red Teams have always operated on the cutting edge of security. We’ve shared our journey in the past: from the high-stakes operations showcased in our Hac…Thu, 13 Aug 2026 10:20:00 +0000https://blog.google/security/the-evolving-role-of-the-red-team-in-the-era-of-agentic-security/SecurityAIarticleGooglehttps://blog.google/security/the-evolving-role-of-the-red-team-in-the-era-of-agentic-security/Daniel Fabianhttps://blog.google/security/the-multi-layered-defenses-that-harden-chrome-against-abusive-notifications/Image of a URL with a small window saying "Get notifications?"<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Chrome_Combating_Abusive_Notifi.max-600x600.format-webp_z21Aw7R.webp">Bad actors have increasingly abused the push notification system, bombarding people with deceptive and unwanted notifications. To combat this, Chrome Security embarked o…Tue, 11 Aug 2026 17:00:00 +0000https://blog.google/security/the-multi-layered-defenses-that-harden-chrome-against-abusive-notifications/Chrome SecuritySafety & SecurityChromearticleBad actors have increasingly abused the push notification system, bombarding people with deceptive and unwanted notifications. To combat this, Chrome Security embarked on a multi-year journey, in collaboration with Firebase Cloud Messaging (FCM) and Safe Browsing, to significantly reduce notification abuse and improve the security and quality of the web ecosystem for everyone.Googlehttps://blog.google/security/the-multi-layered-defenses-that-harden-chrome-against-abusive-notifications/Hannah BuonomoJonathan LiNidhi Davawalahttps://blog.google/security/android-ai-security-eu-dma/Over the last six months, we have been engaging closely with the European Commission (EC) after they opened specification proceedings related to Android interoperability…Wed, 05 Aug 2026 01:00:00 +0000https://blog.google/security/android-ai-security-eu-dma/Android SecuritySecurityarticleGooglehttps://blog.google/security/android-ai-security-eu-dma/Dave KleidermacherEugene LidermanAndroid Security & Privacyhttps://blog.google/security/influence-operations-bulletin-q2-2026/This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q2 2026. It was last updated on June 30, 2026.AprilWe terminated 13 YouTu…Fri, 31 Jul 2026 09:34:00 +0000https://blog.google/security/influence-operations-bulletin-q2-2026/Safety & SecuritySecurityarticleGooglehttps://blog.google/security/influence-operations-bulletin-q2-2026/Trust & Safetyhttps://blog.google/security/chrome-stronger-with-every-update/Video of Chrome logo turning into a shield<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Screenshot_2026-07-17_at_5.00.4.max-600x600.format-webp.webp">Chrome uses Gemini AI to automate vulnerability discovery, triage, and patching, accelerating updates to match modern security risks.Thu, 30 Jul 2026 17:00:00 +0000https://blog.google/security/chrome-stronger-with-every-update/Chrome SecurityChromeAISecurityarticleChrome uses Gemini AI to automate vulnerability discovery, triage, and patching, accelerating updates to match modern security risks.Googlehttps://blog.google/security/chrome-stronger-with-every-update/Chrome Security Teamhttps://blog.google/security/from-finding-to-fixing-reducing-maintainer-burden-with-automated-patches/Since its launch in 2016, OSS-Fuzz has contributed significantly to making open-source secure by finding and reporting tens of thousands of bugs. But finding more vulner…Wed, 29 Jul 2026 16:00:00 +0000https://blog.google/security/from-finding-to-fixing-reducing-maintainer-burden-with-automated-patches/SecurityarticleGooglehttps://blog.google/security/from-finding-to-fixing-reducing-maintainer-burden-with-automated-patches/Alex KilianSoftware Supply Chain IntegrityDustin IngramProduct Securityhttps://blog.google/security/going-beyond-zero-a-new-paradigm-for-enterprise-security/An IT security team working<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/28094___BRS___Beyond_Zero_Blog_.max-600x600.format-webp.webp">Learn about Beyond Zero, Google's new risk-based enterprise security paradigm designed for the AI era.Mon, 27 Jul 2026 16:00:00 +0000https://blog.google/security/going-beyond-zero-a-new-paradigm-for-enterprise-security/SecurityAIarticleLearn about Beyond Zero, Google's new risk-based enterprise security paradigm designed for the AI era.Googlehttps://blog.google/security/going-beyond-zero-a-new-paradigm-for-enterprise-security/Heather AdkinsArchana Ramamoorthyhttps://blog.google/security/android-fake-call-detection/Warning that says 'someone may be pretending to call from your contact's number'<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Blog_Hero_Image_2.max-600x600.format-webp.webp">Fake call detection on Android helps protect you from scammers using AI deepfakes to impersonate your contacts.Tue, 02 Jun 2026 18:00:00 +0000https://blog.google/security/android-fake-call-detection/Android SecurityarticleFake call detection on Android helps protect you from scammers using AI deepfakes to impersonate your contacts.Googlehttps://blog.google/security/android-fake-call-detection/Eric LynchTroy KensingerOren Schetrit