56,966 blogs · [ { "id": "01a0ca88-3748-7128-b8bb-8d08d0478e90", "title": "Bare-metal Rust in Android", "url": "http://security.googleblog.com/2023/10/bare-metal-rust-in-android.html", "published_at": "2023-10-09T16:30:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d0576ec2", "title": "Expanding our exploit reward program to Chrome and Cloud", "url": "http://security.googleblog.com/2023/10/expanding-our-exploit-reward-program-to.html", "published_at": "2023-10-06T14:21:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d08f6611", "title": "SMS Security & Privacy Gaps Make It Clear Users Need a Messaging Upgrade", "url": "http://security.googleblog.com/2023/09/sms-security-privacy-gaps-make-it-clear.html", "published_at": "2023-09-27T16:50:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d0b460e9", "title": "Scaling Rust Adoption Through Training", "url": "http://security.googleblog.com/2023/09/scaling-rust-adoption-through-training.html", "published_at": "2023-09-21T16:00:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d17c640a", "title": "Capslock: What is your code really capable of?", "url": "http://security.googleblog.com/2023/09/capslock-what-is-your-code-really.html", "published_at": "2023-09-15T18:10:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d23a941a", "title": "Android Goes All-in on Fuzzing", "url": "http://security.googleblog.com/2023/08/android-goes-all-in-on-fuzzing.html", "published_at": "2023-08-29T16:06:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d241f856", "title": "AI-Powered Fuzzing: Breaking the Bug Hunting Barrier", "url": "http://security.googleblog.com/2023/08/ai-powered-fuzzing-breaking-bug-hunting.html", "published_at": "2023-08-16T17:02:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d275f622", "title": "Toward Quantum Resilient Security Keys", "url": "http://security.googleblog.com/2023/08/toward-quantum-resilient-security-keys.html", "published_at": "2023-08-15T21:57:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d2c755ad", "title": "Making Chrome more secure by bringing Key Pinning to Android", "url": "http://security.googleblog.com/2023/08/making-chrome-more-secure-by-bringing.html", "published_at": "2023-08-10T16:01:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d3aae19e", "title": "Downfall and Zenbleed: Googlers helping secure the ecosystem", "url": "http://security.googleblog.com/2023/08/downfall-and-zenbleed-googlers-helping.html", "published_at": "2023-08-08T17:00:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d430fae9", "title": "Android 14 introduces first-of-its-kind cellular connectivity security features", "url": "http://security.googleblog.com/2023/08/android-14-introduces-first-of-its-kind.html", "published_at": "2023-08-08T15:59:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d528c14b", "title": "An update on Chrome Security updates – shipping security fixes to you faster", "url": "http://security.googleblog.com/2023/08/an-update-on-chrome-security-updates.html", "published_at": "2023-08-08T15:59:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d5394c3f", "title": "Pixel Binary Transparency: verifiable security for Pixel devices", "url": "http://security.googleblog.com/2023/08/pixel-binary-transparency-verifiable.html", "published_at": "2023-08-04T17:49:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d5e644f9", "title": "The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022", "url": "http://security.googleblog.com/2023/07/the-ups-and-downs-of-0-days-year-in.html", "published_at": "2023-07-27T16:01:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d6d53e78", "title": "Supply chain security for Go, Part 3: Shifting left", "url": "http://security.googleblog.com/2023/07/supply-chain-security-for-go-part-3.html", "published_at": "2023-07-20T19:58:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d6fa11c7", "title": "A look at Chrome’s security review culture", "url": "http://security.googleblog.com/2023/07/a-look-at-chromes-security-review.html", "published_at": "2023-07-20T16:00:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d7b63952", "title": "An important step towards secure and interoperable messaging", "url": "http://security.googleblog.com/2023/07/an-important-step-towards-secure-and.html", "published_at": "2023-07-19T19:44:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d8842967", "title": "Gmail client-side encryption: A deep dive", "url": "http://security.googleblog.com/2023/06/gmail-client-side-encryption-deep-dive.html", "published_at": "2023-06-29T22:09:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d92726b7", "title": "Supply chain security for Go, Part 2: Compromised dependencies", "url": "http://security.googleblog.com/2023/06/supply-chain-security-for-go-part-2.html", "published_at": "2023-06-23T16:00:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08d97de6b0", "title": "Google Cloud Awards $313,337 in 2022 VRP Prizes", "url": "http://security.googleblog.com/2023/06/google-cloud-awards-313337-in-2022-vrp.html", "published_at": "2023-06-22T16:05:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08da16dcf2", "title": "Protect and manage browser extensions using Chrome Browser Cloud Management", "url": "http://security.googleblog.com/2023/06/protect-and-manage-browser-extensions.html", "published_at": "2023-06-20T15:58:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08da80880b", "title": "Bringing Transparency to Confidential Computing with SLSA", "url": "http://security.googleblog.com/2023/06/bringing-transparency-to-confidential.html", "published_at": "2023-06-16T17:10:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08daeea093", "title": "Learnings from kCTF VRP's 42 Linux kernel exploits submissions", "url": "http://security.googleblog.com/2023/06/learnings-from-kctf-vrps-42-linux.html", "published_at": "2023-06-14T15:59:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08db7a86c9", "title": "Announcing the Chrome Browser Full Chain Exploit Bonus", "url": "http://security.googleblog.com/2023/06/announcing-chrome-browser-full-chain.html", "published_at": "2023-06-01T15:59:00+00:00" }, { "id": "01a0ca88-3748-7128-b8bb-8d08db99e15a", "title": "Adding Chrome Browser Cloud Management remediation actions in Splunk using Alert Actions", "url": "http://security.googleblog.com/2023/05/adding-chrome-browser-cloud-management.html", "published_at": "2023-05-31T16:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaec84b5b63", "title": "Time to challenge yourself in the 2023 Google CTF!", "url": "http://security.googleblog.com/2023/05/time-to-challenge-yourself-in-2023-google-ctf2023.html", "published_at": "2023-05-26T21:55:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaec931d7ba", "title": "Google Trust Services ACME API available to all users at no cost", "url": "http://security.googleblog.com/2023/05/google-trust-services-acme-api_0503894189.html", "published_at": "2023-05-25T16:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaec9e9ef3b", "title": "Announcing the launch of GUAC v0.1", "url": "http://security.googleblog.com/2023/05/announcing-launch-of-guac-v01.html", "published_at": "2023-05-24T16:01:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaeca39107f", "title": "How the Chrome Root Program Keeps Users Safe", "url": "http://security.googleblog.com/2023/05/how-chrome-root-program-keeps-users-safe.html", "published_at": "2023-05-23T16:01:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaeca444d68", "title": "New Android & Google Device Vulnerability Reward Program Initiatives", "url": "http://security.googleblog.com/2023/05/new-android-google-device-VRP.html", "published_at": "2023-05-17T15:58:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecb051369", "title": "$22k awarded to SBFT ‘23 fuzzing competition winners", "url": "http://security.googleblog.com/2023/05/22k-awarded-to-sbft-23-fuzzing.html", "published_at": "2023-05-15T17:33:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecbbd95df", "title": "Introducing a new way to buzz for eBPF vulnerabilities", "url": "http://security.googleblog.com/2023/05/introducing-new-way-to-buzz-for-ebpf.html", "published_at": "2023-05-11T16:44:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecbc7fa47", "title": "I/O 2023: What's new in Android security and privacy", "url": "http://security.googleblog.com/2023/05/io-2023-android-security-and-privacy.html.html", "published_at": "2023-05-10T18:59:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecca396c1", "title": "Making authentication faster than ever: passkeys vs. passwords", "url": "http://security.googleblog.com/2023/05/making-authentication-faster-than-ever.html", "published_at": "2023-05-05T16:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecd1002c9", "title": "Introducing rules_oci", "url": "http://security.googleblog.com/2023/05/introducing-rulesoci.html", "published_at": "2023-05-05T15:02:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecdcab1ee", "title": "So long passwords, thanks for all the phish", "url": "http://security.googleblog.com/2023/05/so-long-passwords-thanks-for-all-phish.html", "published_at": "2023-05-03T12:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaece1b47db", "title": "Google and Apple lead initiative for an industry specification to address unwanted tracking", "url": "http://security.googleblog.com/2023/05/google-and-apple-lead-initiative-for.html", "published_at": "2023-05-02T13:01:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaece409a0f", "title": "Secure mobile payment transactions enabled by Android Protected Confirmation", "url": "http://security.googleblog.com/2023/04/secure-mobile-payment-transactions.html", "published_at": "2023-04-28T15:59:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaeced8fe5e", "title": "How we fought bad apps and bad actors in 2022", "url": "http://security.googleblog.com/2023/04/how-we-fought-bad-apps-and-bad-actors.html", "published_at": "2023-04-27T14:59:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecefdbf9e", "title": "Celebrating SLSA v1.0: securing the software supply chain for everyone", "url": "http://security.googleblog.com/2023/04/celebrating-slsa-v10-securing-software.html", "published_at": "2023-04-26T15:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecf6615b6", "title": "Google Authenticator now supports Google Account synchronization", "url": "http://security.googleblog.com/2023/04/google-authenticator-now-supports.html", "published_at": "2023-04-24T16:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaecfff5501", "title": "Securely Hosting User Data in Modern Web Applications", "url": "http://security.googleblog.com/2023/04/securely-hosting-user-data-in-modern.html", "published_at": "2023-04-18T16:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed0702c77", "title": "Supply chain security for Go, Part 1: Vulnerability management", "url": "http://security.googleblog.com/2023/04/supply-chain-security-for-go-part-1.html", "published_at": "2023-04-13T16:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed0eb9207", "title": "Announcing the deps.dev API: critical dependency data for secure supply chains", "url": "http://security.googleblog.com/2023/04/announcing-depsdev-api-critical.html", "published_at": "2023-04-11T16:05:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed0f0cb45", "title": "OSV and the Vulnerability Life Cycle", "url": "http://security.googleblog.com/2023/03/osv-and-vulnerability-life-cycle.html", "published_at": "2023-03-08T17:04:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed10f6462", "title": "Thank you and goodbye to the Chrome Cleanup Tool", "url": "http://security.googleblog.com/2023/03/thank-you-and-goodbye-to-chrome-cleanup.html", "published_at": "2023-03-08T16:59:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed1670832", "title": "Google Trust Services now offers TLS certificates for Google Domains customers", "url": "http://security.googleblog.com/2023/03/google-trust-services-now-offers-tls.html", "published_at": "2023-03-02T17:26:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed1964ec8", "title": "8 ways to secure Chrome browser for Google Workspace users", "url": "http://security.googleblog.com/2023/03/8-ways-to-secure-chrome-browser-for.html", "published_at": "2023-03-01T16:59:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed210b1be", "title": "Our commitment to fighting invalid traffic on Connected TV", "url": "http://security.googleblog.com/2023/02/our-commitment-to-fighting-invalid.html", "published_at": "2023-02-28T14:00:00+00:00" }, { "id": "01a0ca88-8866-70a0-8c0f-7eaed2c77942", "title": "Moving Connected Device Security Standards Forward", "url": "http://security.googleblog.com/2023/02/moving-connected-device-security.html", "published_at": "2023-02-23T16:59:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0291a5d6a2", "title": "Vulnerability Reward Program: 2022 Year in Review", "url": "http://security.googleblog.com/2023/02/vulnerability-reward-program-2022-year.html", "published_at": "2023-02-22T16:59:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0292580cb2", "title": "Hardening Firmware Across the Android Ecosystem", "url": "http://security.googleblog.com/2023/02/hardening-firmware-across-android.html", "published_at": "2023-02-21T17:29:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029289e4b0", "title": "The US Government says companies should take more responsibility for cyberattacks. We agree.", "url": "http://security.googleblog.com/2023/02/the-us-government-says-companies-should.html", "published_at": "2023-02-13T17:01:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b02936d5bff", "title": "Taking the next step: OSS-Fuzz in 2023", "url": "http://security.googleblog.com/2023/02/taking-next-step-oss-fuzz-in-2023.html", "published_at": "2023-02-01T18:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0293fc3457", "title": "Sustaining Digital Certificate Security - TrustCor Certificate Distrust", "url": "http://security.googleblog.com/2023/01/sustaining-digital-certificate-security_13.html", "published_at": "2023-01-13T17:29:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0294ede3b7", "title": "Supporting the Use of Rust in the Chromium Project", "url": "http://security.googleblog.com/2023/01/supporting-use-of-rust-in-chromium.html", "published_at": "2023-01-12T17:26:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b02956c8077", "title": "Expanding the App Defense Alliance", "url": "http://security.googleblog.com/2022/12/app-defense-alliance-expansion.html", "published_at": "2022-12-15T16:59:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029628867c", "title": "Announcing OSV-Scanner: Vulnerability Scanner for Open Source", "url": "http://security.googleblog.com/2022/12/announcing-osv-scanner-vulnerability.html", "published_at": "2022-12-13T18:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029704b791", "title": "Trust in transparency: Private Compute Core", "url": "http://security.googleblog.com/2022/12/trust-in-transparency-private-compute.html", "published_at": "2022-12-08T16:59:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b02979c735e", "title": "Enhanced Protection - The strongest level of Safe Browsing protection Google Chrome has to offer", "url": "http://security.googleblog.com/2022/12/enhanced-protection-strongest-level-of.html", "published_at": "2022-12-05T18:03:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0298874447", "title": "Memory Safe Languages in Android 13", "url": "http://security.googleblog.com/2022/12/memory-safe-languages-in-android-13.html", "published_at": "2022-12-01T16:58:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0298b84a0c", "title": "Our Principles for IoT Security Labeling", "url": "http://security.googleblog.com/2022/11/our-principles-for-iot-security-labeling.html", "published_at": "2022-11-02T17:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0298f27cb9", "title": "Announcing GUAC, a great pairing with SLSA (and SBOM)!", "url": "http://security.googleblog.com/2022/10/announcing-guac-great-pairing-with-slsa.html", "published_at": "2022-10-20T17:01:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b02994d1f01", "title": "Security of Passkeys in the Google Password Manager", "url": "http://security.googleblog.com/2022/10/SecurityofPasskeysintheGooglePasswordManager.html", "published_at": "2022-10-12T12:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0299e40c42", "title": "Google Pixel 7 and Pixel 7 Pro: The next evolution in mobile security", "url": "http://security.googleblog.com/2022/10/google-pixel-7-and-pixel-7-pro-next.html", "published_at": "2022-10-11T17:01:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b0299ef08c7", "title": "Use-after-freedom: MiraclePtr", "url": "http://security.googleblog.com/2022/09/use-after-freedom-miracleptr.html", "published_at": "2022-09-13T16:59:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029a3e4fad", "title": "Fuzzing beyond memory corruption: Finding broader classes of vulnerabilities automatically", "url": "http://security.googleblog.com/2022/09/fuzzing-beyond-memory-corruption.html", "published_at": "2022-09-08T16:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029af6ebe2", "title": "Announcing Google’s Open Source Software Vulnerability Rewards Program", "url": "http://security.googleblog.com/2023/08/Announcing-Googles-Open-Source-Software-Vulnerability-Rewards-Program .html", "published_at": "2022-08-30T11:01:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029b6c25de", "title": "Announcing the Open Sourcing of Paranoid's Library", "url": "http://security.googleblog.com/2022/08/announcing-open-sourcing-of-paranoids.html", "published_at": "2022-08-24T17:14:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029be52d18", "title": "Making Linux Kernel Exploit Cooking Harder", "url": "http://security.googleblog.com/2022/08/making-linux-kernel-exploit-cooking.html", "published_at": "2022-08-10T16:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029cdab9fa", "title": "How Hash-Based Safe Browsing Works in Google Chrome", "url": "http://security.googleblog.com/2022/08/how-hash-based-safe-browsing-works-in.html", "published_at": "2022-08-08T15:55:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029d5c31bb", "title": "DNS-over-HTTP/3 in Android", "url": "http://security.googleblog.com/2022/07/dns-over-http3-in-android.html", "published_at": "2022-07-19T16:59:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029e53d3de", "title": "Game on! The 2022 Google CTF is here.", "url": "http://security.googleblog.com/2022/06/game-on-2022-google-ctf-is-here.html", "published_at": "2022-06-21T16:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029eeb9056", "title": "SBOM in Action: finding vulnerabilities with a Software Bill of Materials", "url": "http://security.googleblog.com/2022/06/sbom-in-action-finding-vulnerabilities.html", "published_at": "2022-06-14T16:00:00+00:00" }, { "id": "01a0ca88-d367-721e-b701-7b029f3d61d2", "title": "Announcing the winners of the 2021 GCP VRP Prize", "url": "http://security.googleblog.com/2022/06/announcing-winners-of-2021-gcp-vrp-prize.html", "published_at": "2022-06-03T19:03:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b24b225cd", "title": "Retrofitting Temporal Memory Safety on C++", "url": "http://security.googleblog.com/2022/05/retrofitting-temporal-memory-safety-on-c.html", "published_at": "2022-05-26T17:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2516df2f", "title": "Privileged pod escalations in Kubernetes and GKE", "url": "http://security.googleblog.com/2022/05/privileged-pod-escalations-in.html", "published_at": "2022-05-18T13:03:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b25284f4a", "title": "I/O 2022: Android 13 security and privacy (and more!)", "url": "http://security.googleblog.com/2022/05/io-2022-android-13-security-and-privacy.html", "published_at": "2022-05-11T19:05:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b259181b9", "title": "Taking on the Next Generation of Phishing Scams", "url": "http://security.googleblog.com/2022/05/taking-on-next-generation-of-phishing.html", "published_at": "2022-05-11T18:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b25b28fed", "title": "The Package Analysis Project: Scalable detection of malicious open source packages", "url": "http://security.googleblog.com/2022/04/the-package-analysis-project-scalable.html", "published_at": "2022-04-28T16:05:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2663a464", "title": "How we fought bad apps and developers in 2021", "url": "http://security.googleblog.com/2022/04/how-we-fought-bad-apps-and-developers.html", "published_at": "2022-04-27T16:01:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b27119f6b", "title": "How to SLSA Part 3 - Putting it all together", "url": "http://security.googleblog.com/2022/04/how-to-slsa-part-3-putting-it-all.html", "published_at": "2022-04-14T17:28:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b27ada816", "title": "How to SLSA Part 2 - The Details", "url": "http://security.googleblog.com/2022/04/how-to-slsa-part-2-details.html", "published_at": "2022-04-13T16:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b27e8c798", "title": "How to SLSA Part 1 - The Basics", "url": "http://security.googleblog.com/2022/04/how-to-slsa-part-1-basics.html", "published_at": "2022-04-12T16:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b27f0eba0", "title": "Improving software supply chain security with tamper-proof builds", "url": "http://security.googleblog.com/2022/04/improving-software-supply-chain.html", "published_at": "2022-04-07T13:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b28afcfe4", "title": "Find and $eek! Increased rewards for Google Nest & Fitbit devices", "url": "http://security.googleblog.com/2022/04/find-and-eek-increased-rewards-for.html", "published_at": "2022-04-05T13:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b29860993", "title": "What's up with in-the-wild exploits? Plus, what we're doing about it.", "url": "http://security.googleblog.com/2022/03/whats-up-with-in-wild-exploits-plus.html", "published_at": "2022-03-10T18:33:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2a65cc5b", "title": "Mitigating kernel risks on 32-bit ARM", "url": "http://security.googleblog.com/2022/02/mitigating-kernel-risks-on-32-bit-arm.html", "published_at": "2022-02-23T17:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2b258e96", "title": "🌹 Roses are red, Violets are blue 💙 Giving leets 🧑‍💻 more sweets 🍭 All of 2022!", "url": "http://security.googleblog.com/2022/02/roses-are-red-violets-are-blue-giving.html", "published_at": "2022-02-14T17:07:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2bca81a2", "title": "Vulnerability Reward Program: 2021 Year in Review", "url": "http://security.googleblog.com/2022/02/vulnerability-reward-program-2021-year.html", "published_at": "2022-02-10T17:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2bdb04c1", "title": "Reducing Security Risks in Open Source Software at Scale: Scorecards Launches V4", "url": "http://security.googleblog.com/2022/01/reducing-security-risks-in-open-source.html", "published_at": "2022-01-19T15:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2bf0c142", "title": "Apache Log4j Vulnerability", "url": "http://security.googleblog.com/2021/12/apache-log4j-vulnerability.html", "published_at": "2021-12-18T02:08:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2c364d29", "title": "Understanding the Impact of Apache Log4j Vulnerability", "url": "http://security.googleblog.com/2021/12/understanding-impact-of-apache-log4j.html", "published_at": "2021-12-17T17:25:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2c4482e2", "title": "Improving OSS-Fuzz and Jazzer to catch Log4Shell", "url": "http://security.googleblog.com/2021/12/improving-oss-fuzz-and-jazzer-to-catch.html", "published_at": "2021-12-16T22:04:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2c61d839", "title": "Empowering the next generation of Android Application Security Researchers", "url": "http://security.googleblog.com/2021/12/empowering-next-generation-of-android.html", "published_at": "2021-12-14T18:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2c882c38", "title": "Exploring Container Security: A Storage Vulnerability Deep Dive", "url": "http://security.googleblog.com/2021/12/exploring-container-security-storage.html", "published_at": "2021-12-02T20:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2cbf65e5", "title": "ClusterFuzzLite: Continuous fuzzing for all", "url": "http://security.googleblog.com/2021/11/clusterfuzzlite-continuous-fuzzing-for.html", "published_at": "2021-11-11T12:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2cd7e481", "title": "Trick & Treat! 🎃 Paying Leets and Sweets for Linux Kernel privescs and k8s escapes", "url": "http://security.googleblog.com/2021/11/trick-treat-paying-leets-and-sweets-for.html", "published_at": "2021-11-01T16:30:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2d16e39a", "title": "Protecting your device information with Private Set Membership", "url": "http://security.googleblog.com/2021/10/protecting-your-device-information-with.html", "published_at": "2021-10-28T17:00:00+00:00" }, { "id": "01a0ca89-1b4b-734c-8caf-ad9b2de05f11", "title": "Pixel 6: Setting a new standard for mobile security", "url": "http://security.googleblog.com/2021/10/pixel-6-setting-new-standard-for-mobile.html", "published_at": "2021-10-27T17:01:00+00:00" } ] posts Claim your blog

Back to Google Security Blog

Blog · corpus.blog/blogs/security.googleblog.com/posts

Google Security Blog

security.googleblog.com

2023

Bare-metal Rust in Android original ↗

9 Oct 2023

Expanding our exploit reward program to Chrome and Cloud original ↗

6 Oct 2023

SMS Security & Privacy Gaps Make It Clear Users Need a Messaging Upgrade original ↗

27 Sept 2023

Scaling Rust Adoption Through Training original ↗

21 Sept 2023

Capslock: What is your code really capable of?original ↗

15 Sept 2023

Android Goes All-in on Fuzzing original ↗

29 Aug 2023

AI-Powered Fuzzing: Breaking the Bug Hunting Barrier original ↗

16 Aug 2023

Toward Quantum Resilient Security Keys original ↗

15 Aug 2023

Making Chrome more secure by bringing Key Pinning to Android original ↗

10 Aug 2023

Downfall and Zenbleed: Googlers helping secure the ecosystem original ↗

8 Aug 2023

Android 14 introduces first-of-its-kind cellular connectivity security features original ↗

8 Aug 2023

An update on Chrome Security updates – shipping security fixes to you faster original ↗

8 Aug 2023

Pixel Binary Transparency: verifiable security for Pixel devices original ↗

4 Aug 2023

The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022 original ↗

27 Jul 2023

Supply chain security for Go, Part 3: Shifting left original ↗

20 Jul 2023

A look at Chrome’s security review culture original ↗

20 Jul 2023

An important step towards secure and interoperable messaging original ↗

19 Jul 2023

Gmail client-side encryption: A deep dive original ↗

29 Jun 2023

Supply chain security for Go, Part 2: Compromised dependencies original ↗

23 Jun 2023

Google Cloud Awards $313,337 in 2022 VRP Prizes original ↗

22 Jun 2023

Protect and manage browser extensions using Chrome Browser Cloud Management original ↗

20 Jun 2023

Bringing Transparency to Confidential Computing with SLSA original ↗

16 Jun 2023

Learnings from kCTF VRP's 42 Linux kernel exploits submissions original ↗

14 Jun 2023

Announcing the Chrome Browser Full Chain Exploit Bonus original ↗

1 Jun 2023

Adding Chrome Browser Cloud Management remediation actions in Splunk using Alert Actions original ↗

31 May 2023

Time to challenge yourself in the 2023 Google CTF!original ↗

26 May 2023

Google Trust Services ACME API available to all users at no cost original ↗

25 May 2023

Announcing the launch of GUAC v0.1 original ↗

24 May 2023

How the Chrome Root Program Keeps Users Safe original ↗

23 May 2023

New Android & Google Device Vulnerability Reward Program Initiatives original ↗

17 May 2023

$22k awarded to SBFT ‘23 fuzzing competition winners original ↗

15 May 2023

Introducing a new way to buzz for eBPF vulnerabilities original ↗

11 May 2023

I/O 2023: What's new in Android security and privacy original ↗

10 May 2023

Making authentication faster than ever: passkeys vs. passwords original ↗

5 May 2023

Introducing rules_oci original ↗

5 May 2023

So long passwords, thanks for all the phish original ↗

3 May 2023

Google and Apple lead initiative for an industry specification to address unwanted tracking original ↗

2 May 2023

Secure mobile payment transactions enabled by Android Protected Confirmation original ↗

28 Apr 2023

How we fought bad apps and bad actors in 2022 original ↗

27 Apr 2023

Celebrating SLSA v1.0: securing the software supply chain for everyone original ↗

26 Apr 2023

Google Authenticator now supports Google Account synchronization original ↗

24 Apr 2023

Securely Hosting User Data in Modern Web Applications original ↗

18 Apr 2023

Supply chain security for Go, Part 1: Vulnerability management original ↗

13 Apr 2023

Announcing the deps.dev API: critical dependency data for secure supply chains original ↗

11 Apr 2023

OSV and the Vulnerability Life Cycle original ↗

8 Mar 2023

Thank you and goodbye to the Chrome Cleanup Tool original ↗

8 Mar 2023

Google Trust Services now offers TLS certificates for Google Domains customers original ↗

2 Mar 2023

8 ways to secure Chrome browser for Google Workspace users original ↗

1 Mar 2023

Our commitment to fighting invalid traffic on Connected TV original ↗

28 Feb 2023

Moving Connected Device Security Standards Forward original ↗

23 Feb 2023

Vulnerability Reward Program: 2022 Year in Review original ↗

22 Feb 2023

Hardening Firmware Across the Android Ecosystem original ↗

21 Feb 2023

The US Government says companies should take more responsibility for cyberattacks. We agree.original ↗

13 Feb 2023

Taking the next step: OSS-Fuzz in 2023 original ↗

1 Feb 2023

Sustaining Digital Certificate Security - TrustCor Certificate Distrust original ↗

13 Jan 2023

Supporting the Use of Rust in the Chromium Project original ↗

12 Jan 2023

2022

Expanding the App Defense Alliance original ↗

15 Dec 2022

Announcing OSV-Scanner: Vulnerability Scanner for Open Source original ↗

13 Dec 2022

Trust in transparency: Private Compute Core original ↗

8 Dec 2022

Enhanced Protection - The strongest level of Safe Browsing protection Google Chrome has to offer original ↗

5 Dec 2022

Memory Safe Languages in Android 13 original ↗

1 Dec 2022

Our Principles for IoT Security Labeling original ↗

2 Nov 2022

Announcing GUAC, a great pairing with SLSA (and SBOM)!original ↗

20 Oct 2022

Security of Passkeys in the Google Password Manager original ↗

12 Oct 2022

Google Pixel 7 and Pixel 7 Pro: The next evolution in mobile security original ↗

11 Oct 2022

Use-after-freedom: MiraclePtr original ↗

13 Sept 2022

Fuzzing beyond memory corruption: Finding broader classes of vulnerabilities automatically original ↗

8 Sept 2022

Announcing Google’s Open Source Software Vulnerability Rewards Program original ↗

30 Aug 2022

Announcing the Open Sourcing of Paranoid's Library original ↗

24 Aug 2022

Making Linux Kernel Exploit Cooking Harder original ↗

10 Aug 2022

How Hash-Based Safe Browsing Works in Google Chrome original ↗

8 Aug 2022

DNS-over-HTTP/3 in Android original ↗

19 Jul 2022

Game on! The 2022 Google CTF is here.original ↗

21 Jun 2022

SBOM in Action: finding vulnerabilities with a Software Bill of Materials original ↗

14 Jun 2022

Announcing the winners of the 2021 GCP VRP Prize original ↗

3 Jun 2022

Retrofitting Temporal Memory Safety on C++original ↗

26 May 2022

Privileged pod escalations in Kubernetes and GKE original ↗

18 May 2022

I/O 2022: Android 13 security and privacy (and more!)original ↗

11 May 2022

Taking on the Next Generation of Phishing Scams original ↗

11 May 2022

The Package Analysis Project: Scalable detection of malicious open source packages original ↗

28 Apr 2022

How we fought bad apps and developers in 2021 original ↗

27 Apr 2022

How to SLSA Part 3 - Putting it all together original ↗

14 Apr 2022

How to SLSA Part 2 - The Details original ↗

13 Apr 2022

How to SLSA Part 1 - The Basics original ↗

12 Apr 2022

Improving software supply chain security with tamper-proof builds original ↗

7 Apr 2022

Find and $eek! Increased rewards for Google Nest & Fitbit devices original ↗

5 Apr 2022

What's up with in-the-wild exploits? Plus, what we're doing about it.original ↗

10 Mar 2022

Mitigating kernel risks on 32-bit ARM original ↗

23 Feb 2022

🌹 Roses are red, Violets are blue 💙 Giving leets 🧑‍💻 more sweets 🍭 All of 2022!original ↗

14 Feb 2022

Vulnerability Reward Program: 2021 Year in Review original ↗

10 Feb 2022

Reducing Security Risks in Open Source Software at Scale: Scorecards Launches V4 original ↗

19 Jan 2022

2021

Apache Log4j Vulnerability original ↗

18 Dec 2021

Understanding the Impact of Apache Log4j Vulnerability original ↗

17 Dec 2021

Improving OSS-Fuzz and Jazzer to catch Log4Shell original ↗

16 Dec 2021

Empowering the next generation of Android Application Security Researchers original ↗

14 Dec 2021

Exploring Container Security: A Storage Vulnerability Deep Dive original ↗

2 Dec 2021

ClusterFuzzLite: Continuous fuzzing for all original ↗

11 Nov 2021

Trick & Treat! 🎃 Paying Leets and Sweets for Linux Kernel privescs and k8s escapes original ↗

1 Nov 2021

Protecting your device information with Private Set Membership original ↗

28 Oct 2021

Pixel 6: Setting a new standard for mobile security original ↗

27 Oct 2021