Securityhttps://blog.google/security/Securityen-usThu, 23 Apr 2026 12:48:00 +0000https://blog.google/security/static/blogv2/images/google.pngSecurityhttps://blog.google/security/AI threats in the wild: The current state of prompt injections on the webhttps://blog.google/security/prompt-injections-web/We initiated a broad sweep of the public web to monitor for known indirect prompt injection patterns. This is what we found.Thu, 23 Apr 2026 12:48:00 +0000https://blog.google/security/prompt-injections-web/SecurityarticleAI threats in the wild: The current state of prompt injections on the webWe initiated a broad sweep of the public web to monitor for known indirect prompt injection patterns. This is what we found.Googlehttps://blog.google/security/prompt-injections-web/Thomas Brunner<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Yu-Han Liu</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Moni Pande</name><title/><department/><company/></author></item><item><title>Bringing Rust to the Pixel Basebandhttps://blog.google/security/bringing-rust-to-the-pixel-baseband/Google is continuously advancing the security of Pixel devices.Fri, 10 Apr 2026 09:56:00 +0000https://blog.google/security/bringing-rust-to-the-pixel-baseband/Android SecurityarticleBringing Rust to the Pixel BasebandGoogle is continuously advancing the security of Pixel devices.Googlehttps://blog.google/security/bringing-rust-to-the-pixel-baseband/Jiacheng LuSoftware EngineerGoogle Pixel TeamProtecting Cookies with Device Bound Session Credentialshttps://blog.google/security/protecting-cookies-with-device-bound-session-credentials/Following our April 2024 announcement, Device Bound Session Credentials (DBSC) is now entering public availability for Windows users on Chrome 146, and expanding to macO…Thu, 09 Apr 2026 19:25:00 +0000https://blog.google/security/protecting-cookies-with-device-bound-session-credentials/SecurityarticleProtecting Cookies with Device Bound Session CredentialsGooglehttps://blog.google/security/protecting-cookies-with-device-bound-session-credentials/Benjamin AckermanProduct Manager, ChromeChrome Team<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Daniel Rubery</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Chrome team and Guillaume Ehinger</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Google Account Security team</name><title/><department/><company/></author></item><item><title>Google Workspace’s continuous approach to mitigating indirect prompt injectionshttps://blog.google/security/google-workspaces-continuous-approach-to-mitigating-indirect-prompt-injections/Indirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This t…Thu, 02 Apr 2026 19:14:00 +0000https://blog.google/security/google-workspaces-continuous-approach-to-mitigating-indirect-prompt-injections/SecurityarticleGoogle Workspace’s continuous approach to mitigating indirect prompt injectionsGooglehttps://blog.google/security/google-workspaces-continuous-approach-to-mitigating-indirect-prompt-injections/Adam Gavish<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Google GenAI Security Team</name><title/><department/><company/></author></item><item><title>VRP 2025 Year in Reviewhttps://blog.google/security/vrp-2025-year-in-review/2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉! Originally started in 2010, our vulnerabi…Tue, 31 Mar 2026 18:58:00 +0000https://blog.google/security/vrp-2025-year-in-review/VRParticleVRP 2025 Year in ReviewGooglehttps://blog.google/security/vrp-2025-year-in-review/Dirk Göhmann<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Tony Mendez</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>The Vulnerability Rewards Program Team</name><title/><department/><company/></author></item><item><title>Security for the Quantum Era: Implementing Post-Quantum Cryptography in Androidhttps://blog.google/security/security-for-the-quantum-era-implementing-post-quantum-cryptography-in-android/Modern digital security is at a turning point. We are on the threshold of using quantum computers to solve "impossible" problems in drug discovery, materials science, an…Wed, 25 Mar 2026 18:43:00 +0000https://blog.google/security/security-for-the-quantum-era-implementing-post-quantum-cryptography-in-android/Android SecurityarticleSecurity for the Quantum Era: Implementing Post-Quantum Cryptography in AndroidGooglehttps://blog.google/security/security-for-the-quantum-era-implementing-post-quantum-cryptography-in-android/Eric LynchProduct ManagerAndroid and Dom ElliottGroup Product ManagerGoogle Play Team<department/><company/></author></item><item><title>Cultivating a robust and efficient quantum-safe HTTPShttps://blog.google/security/cultivating-a-robust-and-efficient-quantum-safe-https/Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers. The Internet Engineering Task Force (IETF) recently created a…Fri, 27 Feb 2026 18:19:00 +0000https://blog.google/security/cultivating-a-robust-and-efficient-quantum-safe-https/Chrome SecurityarticleCultivating a robust and efficient quantum-safe HTTPSGooglehttps://blog.google/security/cultivating-a-robust-and-efficient-quantum-safe-https/Chrome Secure Web<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Networking Team</name><title/><department/><company/></author></item><item><title>Staying One Step Ahead: Strengthening Android’s Lead in Scam Protectionhttps://blog.google/security/staying-one-step-ahead-strengthening-androids-lead-in-scam-protection/hero<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Android_Scam_Protection_Header_.max-600x600.format-webp.webp">As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.Wed, 25 Feb 2026 18:09:00 +0000https://blog.google/security/staying-one-step-ahead-strengthening-androids-lead-in-scam-protection/Android SecurityarticleStaying One Step Ahead: Strengthening Android’s Lead in Scam ProtectionAs scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.Googlehttps://blog.google/security/staying-one-step-ahead-strengthening-androids-lead-in-scam-protection/Lyubov FarafonovaProduct ManagerPhone by GoogleAlberto Pastor NietoProduct ManagerGoogle Messages and RCS Spam and AbuseStaying One Step Ahead: Strengthening Android’s Lead in Scam Protectionhttps://blog.google/security/strengthening-android-lead-in-scam-protection/The image illustrates how the Android operating system uses AI to analyze message patterns in real time, identifying phishing attempts and proactively protecting user privacy and data.<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/Android_Scam_Protection_Header_.max-600x600.format-webp.webp">We’ve shared how Android’s proactive, multi-layered scam defenses utilize Google AI to protect users around the world from over 10 billion suspected malicious calls and …Wed, 25 Feb 2026 15:17:00 +0000https://blog.google/security/strengthening-android-lead-in-scam-protection/SecurityarticleStaying One Step Ahead: Strengthening Android’s Lead in Scam ProtectionGooglehttps://blog.google/security/strengthening-android-lead-in-scam-protection/Lyubov Farafonova<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Product Manager</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Phone by Google; Alberto Pastor Nieto</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Sr. Product Manager Google Messages</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>RCS Spam</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Abuse</name><title/><department/><company/></author></item><item><title>Keeping Google Play & Android app ecosystems safe in 2025https://blog.google/security/keeping-google-play-android-app-ecosystem-safe-2025/una ilustración digital en 3D que representa la seguridad en el ecosistema de Android.<img src="https://storage.googleapis.com/gweb-uniblog-publish-prod/images/SafeAppEcosystem_BlogHero_Still.max-600x600.format-webp.webp">The Android ecosystem is a thriving global community built on trust, giving billions of users the confidence to download the latest apps. In order to maintain that trust…Thu, 19 Feb 2026 17:00:00 +0000https://blog.google/security/keeping-google-play-android-app-ecosystem-safe-2025/SecurityarticleKeeping Google Play & Android app ecosystems safe in 2025Googlehttps://blog.google/security/keeping-google-play-android-app-ecosystem-safe-2025/Vijaya Kaza<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>VP</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>GM</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>App & Ecosystem Trust</name><title/><department/><company/></author></item><item><title>New Android Theft Protection Feature Updates: Smarter, Strongerhttps://blog.google/security/android-theft-protection-feature-updates/Phone theft is more than just losing a device; it's a form of financial fraud that can leave you suddenly vulnerable to personal data and financial theft. That’s why we'…Tue, 27 Jan 2026 16:59:00 +0000https://blog.google/security/android-theft-protection-feature-updates/SecurityarticleNew Android Theft Protection Feature Updates: Smarter, StrongerGooglehttps://blog.google/security/android-theft-protection-feature-updates/Nataliya Stanetsky<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Fabrício Ferracioli</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Elliot Sisteron</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Irene Ang of the Android Security Team</name><title/><department/><company/></author></item><item><title>HTTPS certificate industry phasing out less secure domain validation methodshttps://blog.google/security/https-certificate-industry-phasing-ou/Secure connections are the backbone of the modern web, but a certificate is only as trustworthy as the validation process and issuance practices behind it. Recently, the…Wed, 10 Dec 2025 20:00:00 +0000https://blog.google/security/https-certificate-industry-phasing-ou/Chrome SecurityarticleHTTPS certificate industry phasing out less secure domain validation methodsGooglehttps://blog.google/security/https-certificate-industry-phasing-ou/Chrome Root Program Team<department/><company/></author></item><item><title>Further Hardening Android GPUshttps://blog.google/security/further-hardening-android-gpus/Last year, Google's Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, a component used in billions of Android devices worldwi…Tue, 09 Dec 2025 17:00:00 +0000https://blog.google/security/further-hardening-android-gpus/Android SecurityarticleFurther Hardening Android GPUsGooglehttps://blog.google/security/further-hardening-android-gpus/Liz PruckaAndroid Security and Privacy TeamHamzeh ZawawyAndroid Security and Privacy TeamRishika HoodaAndroid Security and Privacy TeamArchitecting Security for Agentic Capabilities in Chromehttps://blog.google/security/architecting-security-for-agentic/Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Ch…Mon, 08 Dec 2025 18:03:00 +0000https://blog.google/security/architecting-security-for-agentic/Chrome SecurityarticleArchitecting Security for Agentic Capabilities in ChromeGooglehttps://blog.google/security/architecting-security-for-agentic/Nathan ParkerChrome security teamAndroid expands pilot for in-call scam protection for financial appshttps://blog.google/security/android-expands-pilot-in-call-scam-protection-financial-apps/Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading …Wed, 03 Dec 2025 16:59:00 +0000https://blog.google/security/android-expands-pilot-in-call-scam-protection-financial-apps/Android SecurityarticleAndroid expands pilot for in-call scam protection for financial appsGooglehttps://blog.google/security/android-expands-pilot-in-call-scam-protection-financial-apps/Aden Haussmann<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Associate Product Manager</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Sumeet Sharma</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Play Partnerships Trust & Safety Lead</name><title/><department/><company/></author></item><item><title>Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharinghttps://blog.google/security/android-quick-share-support-for-airdrop-security/Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone th…Thu, 20 Nov 2025 17:00:00 +0000https://blog.google/security/android-quick-share-support-for-airdrop-security/Android SecurityarticleAndroid Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File SharingGooglehttps://blog.google/security/android-quick-share-support-for-airdrop-security/Dave KleidermacherVP, Platforms Security & Privacy, GoogleRust in Android: move fast and fix thingshttps://blog.google/security/rust-in-android-move-fast-fix-things/Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in new code quickly yields durable and compounding gains. This year we lo…Thu, 13 Nov 2025 16:59:00 +0000https://blog.google/security/rust-in-android-move-fast-fix-things/Android SecurityarticleRust in Android: move fast and fix thingsGooglehttps://blog.google/security/rust-in-android-move-fast-fix-things/Jeff Vander StoepAndroidHow Android provides the most effective protection to keep you safe from mobile scamshttps://blog.google/security/how-android-protects-you-from-scams/As Cybersecurity Awareness Month wraps up, we’re focusing on one of today's most pervasive digital threats: mobile scams. In the last 12 months, fraudsters have used adv…Thu, 30 Oct 2025 16:59:00 +0000https://blog.google/security/how-android-protects-you-from-scams/Android SecurityarticleHow Android provides the most effective protection to keep you safe from mobile scamsGooglehttps://blog.google/security/how-android-protects-you-from-scams/Lyubov Farafonova<department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Product Manager</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Phone by Google; Alberto Pastor Nieto</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Sr. Product Manager Google Messages</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>RCS Spam</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Abuse; Vijay Pareek</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Manager</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Android Messaging Trust</name><title/><department/><company/></author><author xmlns:author="http://www.w3.org/2005/Atom"><name>Safety</name><title/><department/><company/></author></item><item><title>HTTPS by defaulthttps://blog.google/security/https-by-defau/One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secure Connections”. This means Ch…Tue, 28 Oct 2025 17:01:00 +0000https://blog.google/security/https-by-defau/Chrome SecurityarticleHTTPS by defaultGooglehttps://blog.google/security/https-by-defau/Chris ThompsonChrome Security TeamMustafa Emre AcerChrome Security TeamSerena ChenChrome Security TeamJoe DeBlasioChrome Security TeamEmily StarkChrome Security TeamDavid AdrianChrome Security TeamAccelerating adoption of AI for cybersecurity at DEF CON 33https://blog.google/security/accelerating-adoption-of-ai-for/Empowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accele…Wed, 24 Sep 2025 18:42:00 +0000https://blog.google/security/accelerating-adoption-of-ai-for/SecurityarticleAccelerating adoption of AI for cybersecurity at DEF CON 33Googlehttps://blog.google/security/accelerating-adoption-of-ai-for/Elie BurszteinGoogle Privacy, Safety and Security TeamMarianna TishchenkoGoogle Privacy, Safety and Security Team