What Google Blog shipped in 2025

Enhancing Android security: Stop malware from snooping on your app data

Android 16 introduces the `accessibilityDataSensitive` flag, a new security feature designed to prevent malicious apps from accessing sensitive data via accessibility APIs. Developers can mark views o…

Android 16 introduces a new security feature, the `accessibilityDataSensitive` flag, to protect sensitive app data from malware exploiting accessibility APIs. This flag allows developers to explicitly

Google has introduced new security features in Android 16 to enhance app data protection. The accessibilityDataSensitive flag allows developers to mark views containing sensitive data, preventing mali

HTTPS certificate industry phasing out less secure domain validation methods

The Chrome Root Program and the CA/Browser Forum have adopted new security requirements for HTTPS certificate issuers, phasing out 11 legacy Domain Control Validation methods by March 2028. These outd…

Google Online Security Blog: HTTPS certificate industry phasing out less secure domain validation methods

The HTTPS certificate industry is phasing out 11 legacy Domain Control Validation methods, driven by the Chrome Root Program and the CA/Browser Forum. These outdated methods, which include physical ma…

Further Hardening Android GPUs

Google's Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, used in billions of Android devices. The collaboration aimed to reduce the GPU driver's attack su…

Google Online Security Blog: Further Hardening Android GPUs

Google's Android Red Team, in partnership with Arm, has further hardened the Mali GPU used in billions of Android devices by reducing the driver's attack surface. This initiative aims to make the GPU …

Architecting Security for Agentic Capabilities in Chrome

Google Chrome is introducing new security measures to address the emerging threat of indirect prompt injection in agentic browsing. This threat can cause agents to perform unwanted actions, such as fi…

Google Online Security Blog: chrome security

Google has introduced a multi-layered security framework to address the emerging risks posed by agentic browsing capabilities in Chrome, particularly focusing on indirect prompt injection—a primary th…

Google Online Security Blog: chrome

Google Chrome is introducing new security measures to address the emerging threat of indirect prompt injection in agentic browsing capabilities. This threat can cause agents to perform unwanted action…

Google Online Security Blog: Architecting Security for Agentic Capabilities in Chrome

Google has introduced new security measures for agentic capabilities in Chrome to address the primary threat of indirect prompt injection, which can cause agents to perform unwanted actions like finan…

Android expands pilot for in-call scam protection for financial apps

Google's Android has expanded its in-call scam protection pilot, initially launched in the UK, to the United States. This feature, designed to combat financial scams, warns users when they share their…

Building Better Software, Faster

Google’s Android team has announced two significant security and platform updates that expand its competitive edge in mobile security and cross-platform interoperability. The first is the expansion of…

Google Online Security Blog: Android expands pilot for in-call scam protection for financial apps

Android is expanding its pilot program for in-call scam protection to the United States, following successful pilots in the UK, Brazil, and India. This feature, which is designed to combat financial s…

Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing

Google has made Quick Share interoperable with AirDrop, enabling two-way file sharing between Android and iOS devices, starting with the Pixel 10 Family. This feature allows users to share photos, vid…

Protecting vulnerable audiences is at the heart of AI Safety efforts

Google is prioritizing AI safety efforts to protect vulnerable audiences in India, particularly focusing on combating sophisticated scams and enhancing digital literacy. The company is introducing new…

Google Online Security Blog: Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing

Google has made Quick Share interoperable with AirDrop, enabling two-way file sharing between Android and iOS devices, starting with the Pixel 10 Family. This feature allows users to share photos, vid…

Ballot SC-090: Gradually sunset all remaining email-based, phone-based, and ‘crossover’ validation methods from Sections 3.2.2.4 and 3.2.2.5

The CA/Browser Forum has unanimously approved Ballot SC-090, which proposes to gradually phase out email-based, phone-based, and 'crossover' validation methods for domain and IP address validation in …

Stronger threat detection, simpler integration: Protect your growth with the Play Integrity API

Google has enhanced the Play Integrity API to offer stronger threat detection and simpler integration for developers. The API now includes new features like Play in-app remediation prompts, which auto…

Rust in Android: move fast and fix things

Google's adoption of Rust in Android has led to significant improvements in both security and development efficiency. The most critical change is the reduction in memory safety vulnerabilities, which …