Google Blog

VRP 2025 Year in Review

VRP 2025 Year in Review

Google's Approach for Secure AI Agents

AI threats in the wild: The current state of prompt injections on the web

Google’s Threat Intelligence teams detected a 32% rise in Indirect Prompt Injection (IPI) attempts on the public web between November 2025 and February 2026, th

The threat of indirect prompt injection

Google’s Threat Intelligence teams found real-world indirect prompt injection (IPI) attempts on the public web, with a 32% increase in malicious detections betw

Google’s Threat Intelligence teams detected a 32% increase in indirect prompt injection (IPI) attempts on the public web between November 2025 and February 2026

GN Reference

The GN build system reference documentation has been updated to include a new buildfile function, `tool_specify`, which allows developers to define arguments fo

TraitGlobalAllocCopy item path

The Rust programming language’s standard library has introduced the `GlobalAlloc` trait, enabling developers to register a custom memory allocator as the defaul

Android Rust Toolchain

Google has introduced a Rust toolchain for the Android Open Source Project, enabling developers to build and test Rust code for Android. The toolchain supports

Bringing Rust to the Pixel Baseband

Google has integrated a memory-safe Rust-based DNS parser into the cellular baseband firmware of its Pixel 10 series devices, marking a significant advancement

Google Online Security Blog: Bringing Rust to the Pixel Baseband

Google has integrated a memory-safe Rust-based DNS parser into the cellular baseband firmware of its Pixel 10 series devices, marking a significant advancement

Google Online Security Blog: Bringing Rust to the Pixel Baseband

Google has integrated a memory-safe Rust-based DNS parser into the cellular baseband firmware of its Pixel 10 series devices, marking the first use of a memory-

Google Online Security Blog

Google announced two major security advancements: first, the integration of a memory-safe Rust-based DNS parser into the Pixel 10 modem firmware, marking the fi

Protecting Cookies with Device Bound Session Credentials

Google has announced the public availability of Device Bound Session Credentials (DBSC) for Windows users on Chrome 146, with macOS support planned in an upcomi

Search code, repositories, users, issues, pull requests...

The GitHub issue page for the W3C Web Application Security Working Group’s DBSC (Device Bound Session Credentials) project highlights ongoing technical challeng

Google Online Security Blog: Protecting Cookies with Device Bound Session Credentials

Google has announced the public availability of Device Bound Session Credentials (DBSC) for Windows users on Chrome 146, with macOS support planned in an upcomi

Google Online Security Blog: Protecting Cookies with Device Bound Session Credentials

Google has introduced Device Bound Session Credentials (DBSC) in Chrome 146 for Windows users, with macOS support planned in an upcoming release, marking a proa