Cybersecurity

Vulnerabilities, attacks, threats, security tools, cloud security, and identity.

44 Articles

Cybersecurity

HTTPS Certificate Industry Moves to Eliminate 11 Less Secure Domain-Ownership Verification Methods

Chrome’s Root Program and the CA/Browser Forum have adopted new requirements to gradually phase out 11 outdated methods for verifying control of a domain when issuing HTTPS certificates. The process will take place in stages, with its full security value expected by March 2028, while pushing website owners toward automated methods that can be cryptographically verified.

2025-12-10

Cybersecurity

How Google Is Building Security Layers for Agentic Browsing Capabilities in Chrome

Google explains a multilayered security architecture to protect Gemini’s agentic capabilities in Chrome from indirect prompt injection, data leakage, and unwanted action execution. The architecture includes an independent model for reviewing whether actions align with the user’s goal, sets that restrict the assets the agent is allowed to read or modify, as well as user confirmations and continuous testing.

2025-12-08

Cybersecurity

Android Expands User Protection Trial Against Call Fraud in Financial Apps

Google has expanded an Android protection trial that warns users when they open a financial app while sharing their screen and speaking with an unsaved number, and lets them end the call and stop sharing with one tap. The trial began in the United States with financial institutions and apps such as Cash App and JPMorganChase, alongside its expansion in the United Kingdom and other trials.

2025-12-03

Cybersecurity

Google Enables File Sharing Between Quick Share and AirDrop with Rust Adoption to Enhance Security

Google has announced Quick Share compatibility with AirDrop, enabling two-way file sharing between Android and iOS devices, beginning with the Pixel 10 family. The company says the feature uses a direct device-to-device communication channel and relies on Rust, internal testing, and an independent evaluation by NetSPI.

2025-11-20

Cybersecurity

Rust in Android: The Safer Path Has Become the Faster Path for Development

Google says that adopting Rust in Android reduced the density of memory-safety vulnerabilities by more than 1,000 times compared with C and C++ code, while Rust changes recorded lower regression rates and shorter code-review times. Its analysis reviews Rust’s expansion into the kernel, firmware, and Google applications, alongside lessons learned from a vulnerability that nearly reached a public release.

2025-11-13

Cybersecurity

How Google Says Android Protects Users from Phone Scams

Google showcased AI-powered protection layers in Android against fraudulent calls and messages, noting that it blocks more than 10 billion suspected malicious attempts each month. It also presented survey results and two independent evaluations comparing Android’s protection with iPhones, while noting that some evaluations and features may not be available in all countries.

2025-10-30

Cybersecurity

Chrome will enable secure connections by default and warn about HTTP sites in 2026

Google plans to enable the “Always use secure connections” setting by default in Chrome 154 in October 2026, so that the browser requests user permission before the first visit to any public site that does not use HTTPS. In April 2026, the company will begin rolling out the setting to Enhanced Safe Browsing users, numbering more than one billion, before extending it to all users.

2025-10-28

Cybersecurity

Google Reveals Phoenix Attacks to Bypass Rowhammer Defenses in DDR5 Memory

Research supported by Google in collaboration with ETH Zurich has shown that customized attack patterns can bypass enhanced TRR defenses in some DDR5 modules, enabling the first privilege-escalation exploit via Rowhammer on a production desktop system equipped with DDR5 memory. The company continues to work on testing platforms and the PRAC standard to strengthen DRAM ecosystem protections.

2025-09-15