Googleblog
14 tracked updates · December 2025
10 feature updates·2 product sunsets·1 security incidents
Browse other months from Googleblog
Android 16 introduces the `accessibilityDataSensitive` flag, a new security feature designed to prevent malicious apps from accessing sensitive data via accessibility APIs. Developers can mark views o…
Android 16 introduces a new security feature, the `accessibilityDataSensitive` flag, to protect sensitive app data from malware exploiting accessibility APIs. This flag allows developers to explicitly…
Google has introduced new security features in Android 16 to enhance app data protection. The accessibilityDataSensitive flag allows developers to mark views containing sensitive data, preventing mali…
The Chrome Root Program and the CA/Browser Forum have adopted new security requirements for HTTPS certificate issuers, phasing out 11 legacy Domain Control Validation methods by March 2028. These outd…
The HTTPS certificate industry is phasing out 11 legacy Domain Control Validation methods, driven by the Chrome Root Program and the CA/Browser Forum. These outdated methods, which include physical ma…
Google's Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, used in billions of Android devices. The collaboration aimed to reduce the GPU driver's attack su…
Google's Android Red Team, in partnership with Arm, has further hardened the Mali GPU used in billions of Android devices by reducing the driver's attack surface. This initiative aims to make the GPU …
Google Chrome is introducing new security measures to address the emerging threat of indirect prompt injection in agentic browsing. This threat can cause agents to perform unwanted actions, such as fi…
Google Chrome is introducing new security measures to address the emerging threat of indirect prompt injection in agentic browsing capabilities. This threat can cause agents to perform unwanted action…
Google has introduced a multi-layered security framework to address the emerging risks posed by agentic browsing capabilities in Chrome, particularly focusing on indirect prompt injection—a primary th…
Google has introduced new security measures for agentic capabilities in Chrome to address the primary threat of indirect prompt injection, which can cause agents to perform unwanted actions like finan…
Google's Android has expanded its in-call scam protection pilot, initially launched in the UK, to the United States. This feature, designed to combat financial scams, warns users when they share their…
Google’s Android team has announced two significant security and platform updates that expand its competitive edge in mobile security and cross-platform interoperability. The first is the expansion of…
Android is expanding its pilot program for in-call scam protection to the United States, following successful pilots in the UK, Brazil, and India. This feature, which is designed to combat financial s…
Track Googleblog on autopilot