Websites - Google Online Security Blog

Google Online Security Blog

Google Online Security Blog RSS Feed

• Game on! The 2022 Google CTF is here.
• SBOM in Action: finding vulnerabilities with a Software Bill of Materials
• Announcing the winners of the 2021 GCP VRP Prize
• Retrofitting Temporal Memory Safety on C++
• Privileged pod escalations in Kubernetes and GKE
• I/O 2022: Android 13 security and privacy (and more!)
• Taking on the Next Generation of Phishing Scams
• The Package Analysis Project: Scalable detection of malicious open source packages
• How we fought bad apps and developers in 2021
• How to SLSA Part 3 - Putting it all together
• How to SLSA Part 2 - The Details
• How to SLSA Part 1 - The Basics
• Improving software supply chain security with tamper-proof builds
• Find and $eek! Increased rewards for Google Nest & Fitbit devices
• What's up with in-the-wild exploits? Plus, what we're doing about it.
• Mitigating kernel risks on 32-bit ARM
• 🌹 Roses are red, Violets are blue 💙 Giving leets 🧑‍💻 more sweets 🍭 All of 2022!
• Vulnerability Reward Program: 2021 Year in Review
• Reducing Security Risks in Open Source Software at Scale: Scorecards Launches V4
• Apache Log4j Vulnerability
• Understanding the Impact of Apache Log4j Vulnerability
• Improving OSS-Fuzz and Jazzer to catch Log4Shell
• Empowering the next generation of Android Application Security Researchers
• Exploring Container Security: A Storage Vulnerability Deep Dive
• ClusterFuzzLite: Continuous fuzzing for all