Collaborate Disseminate
Posted by Will Harris, Chrome Security Team
Cybercriminals using cookie theft infostealer malware continue to pose a risk to the safety and security of our users. We already have a number of initiatives in this area including Chrome’s download protec… Continue reading Improving the security of Chrome cookies on Windows
Posted by Sarah Jacobus, Vulnerability Rewards Team
Last year, we again witnessed the power of community-driven security efforts as researchers from around the world contributed to help us identify and address thousands of vulnerabilities in our prod… Continue reading Vulnerability Reward Program: 2023 Year in Review
Posted by Chrome Security team
Improving the interoperability of web services is an important and worthy goal. We believe that it should be easier for people to maintain and control their digital identities. And we appreciate that policymakers workin… Continue reading Qualified certificates with qualified risks
Posted by David Adrian, Joe DeBlasio and Carlos Joan Rafael Ibarra Lopez, Chrome Security
Chrome 106 added support for enforcing key pins on Android by default, bringing Android to parity with Chrome on desktop platforms. But what is key pinning anyw… Continue reading Making Chrome more secure by bringing Key Pinning to Android
Posted by Amy Ressler, Chrome Security Team
To get security fixes to you faster, starting now in Chrome 116, Chrome is shipping weekly Stable channel updates.
Chrome ships a new milestone release every four weeks. In between those major releases, w… Continue reading An update on Chrome Security updates – shipping security fixes to you faster
Posted by Alex Gough, Chrome Security Team
Security reviewers must develop the confidence and skills to make fast, difficult decisions. A simplistic piece of advice to reviewers is “just be confident” but in reality that takes practice and experience…. Continue reading A look at Chrome’s security review culture
Posted by Anuj Goyal, Product Manager, Chrome Browser
Browser extensions, while offering valuable functionalities, can seem risky to organizations. One major concern is the potential for security vulnerabilities. Poorly designed or malicious extensions… Continue reading Protect and manage browser extensions using Chrome Browser Cloud Management
Amy Ressler, Chrome Security Team on behalf of the Chrome VRP
For 13 years, a key pillar of the Chrome Security ecosystem has included encouraging security researchers to find security vulnerabilities in Chrome browser and report them to us, through… Continue reading Announcing the Chrome Browser Full Chain Exploit Bonus
Posted by Ashish Pujari, Chrome Enterprise Security Team
Introduction
Chrome is trusted by millions of business users as a secure enterprise browser. Organizations can use Chrome Browser Cloud Management to help manage Chrome browsers more effectiv… Continue reading Adding Chrome Browser Cloud Management remediation actions in Splunk using Alert Actions
Posted by Jasika Bawa, Chrome Security Team Starting in Chrome 111 we will begin to turn down the Chrome Cleanup Tool, an application distributed to Chrome users on Windows to help find and remove unwanted software (UwS). Origin story The Chrome Clea… Continue reading Thank you and goodbye to the Chrome Cleanup Tool