Privileged pod escalations in Kubernetes and GKE

---

Posted by GKE and Anthos Platform Security Teams …

Last month, we also started rolling out a new Data safety section in Google Play to help you …

I/O 2022: Android 13 security and privacy (and more!)

---

Posted by Eugene Liderman and Sara N-Marandi, …

Taking on the Next Generation of Phishing Scams

---

Posted by Daniel Margolis, Senior Software …

The Package Analysis Project: Scalable detection of malicious open source packages

---

Posted by Caleb …

How we fought bad apps and developers in 2021

---

Posted by Steve Kafka and Khawaja Shams, Android …

How to SLSA Part 3 - Putting it all together

---

Posted by Tom Hennen, software engineer, BCID & …

Improving software supply chain security with tamper-proof builds

---

Posted by Asra Ali and Laurent …

Find and $eek! Increased rewards for Google Nest & Fitbit devices

---

Posted by Medha Jain, Program …

What's up with in-the-wild exploits? Plus, what we're doing about it.

---

Posted by Adrian Taylor, …

Mitigating kernel risks on 32-bit ARM

---

Posted by Ard Biesheuvel, Google Open Source Security Team …

🌹 Roses are red, Violets are blue 💙 Giving leets 🧑‍💻 more sweets 🍭 All of 2022!

---

Posted by Eduardo …

Vulnerability Reward Program: 2021 Year in Review

---

Posted by Sarah Jacobus, Vulnerability Rewards …

Reducing Security Risks in Open Source Software at Scale: Scorecards Launches V4

---

Posted by Laurent …

Editors Note:
The below numbers were calculated based on both log4j-core and log4j-api, as both were …

Apache Log4j Vulnerability

---

Like many other companies, we’re closely following the multiple CVEs …

Understanding the Impact of Apache Log4j Vulnerability

---

Posted by James Wetter and Nicky Ringland, …

Improving OSS-Fuzz and Jazzer to catch Log4Shell

---

The discovery of the Log4Shell vulnerability has …

Empowering the next generation of Android Application Security Researchers

---

Posted by Jon Bottarini, …

Exploring Container Security: A Storage Vulnerability Deep Dive

---

Posted by Fabricio Voznika and …

To learn more, check out the ClusterFuzzLite documentation . ClusterFuzzLite currently supports …

ClusterFuzzLite: Continuous fuzzing for all

---

Posted by Jonathan Metzman, Google Open Source Security …

Trick & Treat! 🎃 Paying Leets and Sweets for Linux Kernel privescs and k8s escapes

---

Posted by …

Protecting your device information with Private Set Membership

---

Posted by Kevin Yeo and Sarvar …

Google Protects Your Accounts – Even When You No Longer Use Them

---

Posted by Sam Heft-Luthy, Product …

Introducing the Secure Open Source Pilot Program

---

Posted by Meder Kydyraliev and Kim Lewandowski, …

Announcing New Patch Reward Program for Tsunami Security Scanner

---

Posted by Guoli Ma, Sebastian …

September 22, 2021
$ cosign verify-attestation -key cosign.pub …

Posted by Priya Wadhwa and Appu Goundan, Google Open Source Security Team
A few months ago we …

An update on Memory Safety in Chrome

---

Adrian Taylor, Andrew Whalley, Dana Jansens and Nasko Oskov, …

Google Supports Open Source Technology Improvement Fund

---

Posted by Kaylin Trychon, Google Open …

Introducing Android’s Private Compute Services

---

Posted by Suzanne Frey, VP, Product, Android & …

Updates on our continued collaboration with NIST to secure the Software Supply Chain

---

Posted by Eric …

AllStar: Continuous Security Policy Enforcement for GitHub Projects

---

Posted by Mike Maraya, Google …

Simplifying Titan Security Key options for our users

---

Posted by Christiaan Brand, Product Manager, …

Linux Kernel Security Done Right

---

Posted by Kees Cook, Software Engineer, Google Open Source …

A new chapter for Google’s Vulnerability Reward Program

---

Posted by Jan Keller, Technical Program …

Protecting more with Site Isolation

---

Posted by Charlie Reis​ and Alex Moshchuk, Chrome Security Team …

Verifiable design in modern systems

---

Posted by Ryan Hurst, Production Security Team The way we …

Measuring Security Risks in Open Source Software: Scorecards Launches V2

---

Posted by Kim Lewandowski, …

SLSA 1 requires that the build process be fully scripted/automated and generate provenance. …

In recent months, Google has launched several efforts to strengthen open-source security on multiple …

Announcing a unified vulnerability schema for open source

---

Posted by Oliver Chang, Google Open …

Get ready for the 2021 Google CTF

---

Posted by Kristoffer Janke, Information Security Engineer
Are you …

Introducing SLSA, an End-to-End Framework for Supply Chain Integrity

---

Posted Kim Lewandowski, Google …

Rust/C++ interop in the Android Platform

---

Posted by Joel Galenson and Matthew Maurer, Android Team …

Announcing New Abuse Research Grants Program

---

Posted by Anna Hupa,  Marc Henson, and Martin Straka, …

New protections for Enhanced Safe Browsing users in Chrome

---

Posted by Badr Salmi, Google Safe …

Introducing Security By Design

---

Posted by Jon Markoff and Sean Smith, Android Security and Privacy …

Introducing Half-Double: New hammering technique for DRAM Rowhammer bug

---

Research Team: Salman Qazi, …

Labels: android , android security , rust

Integrating Rust Into the Android Open Source Project

---

Posted by Ivan Lozano, Android Team
The …

Posted by Priya Wadhwa, Jake Sanders, Google Open Source Security Team Read More
Posted by Priya …

Making the Internet more secure one signed container at a time

---

Posted by Priya Wadhwa, Google Open …

Enabling Hardware-enforced Stack Protection (cetcompat) in Chrome

---

Alex Gough, Engineer, Chrome …

[Marking site as being monitored from now on]

How we fought bad apps and developers in 2020

---

Posted by Krish Vitaldevara, Director of Product …