What Google Blog shipped in December 2025

Enhancing Android security: Stop malware from snooping on your app data

Android 16 introduces the `accessibilityDataSensitive` flag, a new security feature designed to prevent malicious apps from accessing sensitive data via accessibility APIs. Developers can mark views o…

Android 16 introduces a new security feature, the `accessibilityDataSensitive` flag, to protect sensitive app data from malware exploiting accessibility APIs. This flag allows developers to explicitly

Google has introduced new security features in Android 16 to enhance app data protection. The accessibilityDataSensitive flag allows developers to mark views containing sensitive data, preventing mali

HTTPS certificate industry phasing out less secure domain validation methods

The Chrome Root Program and the CA/Browser Forum have adopted new security requirements for HTTPS certificate issuers, phasing out 11 legacy Domain Control Validation methods by March 2028. These outd…

Google Online Security Blog: HTTPS certificate industry phasing out less secure domain validation methods

The HTTPS certificate industry is phasing out 11 legacy Domain Control Validation methods, driven by the Chrome Root Program and the CA/Browser Forum. These outdated methods, which include physical ma…

Further Hardening Android GPUs

Google's Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, used in billions of Android devices. The collaboration aimed to reduce the GPU driver's attack su…

Google Online Security Blog: Further Hardening Android GPUs

Google's Android Red Team, in partnership with Arm, has further hardened the Mali GPU used in billions of Android devices by reducing the driver's attack surface. This initiative aims to make the GPU …

Architecting Security for Agentic Capabilities in Chrome

Google Chrome is introducing new security measures to address the emerging threat of indirect prompt injection in agentic browsing. This threat can cause agents to perform unwanted actions, such as fi…

Google Online Security Blog: chrome

Google Chrome is introducing new security measures to address the emerging threat of indirect prompt injection in agentic browsing capabilities. This threat can cause agents to perform unwanted action…

Google Online Security Blog: chrome security

Google has introduced a multi-layered security framework to address the emerging risks posed by agentic browsing capabilities in Chrome, particularly focusing on indirect prompt injection—a primary th…

Google Online Security Blog: Architecting Security for Agentic Capabilities in Chrome

Google has introduced new security measures for agentic capabilities in Chrome to address the primary threat of indirect prompt injection, which can cause agents to perform unwanted actions like finan…

Android expands pilot for in-call scam protection for financial apps

Google's Android has expanded its in-call scam protection pilot, initially launched in the UK, to the United States. This feature, designed to combat financial scams, warns users when they share their…

Building Better Software, Faster

Google’s Android team has announced two significant security and platform updates that expand its competitive edge in mobile security and cross-platform interoperability. The first is the expansion of…

Google Online Security Blog: Android expands pilot for in-call scam protection for financial apps

Android is expanding its pilot program for in-call scam protection to the United States, following successful pilots in the UK, Brazil, and India. This feature, which is designed to combat financial s…