Bringing Rust to the Pixel Baseband
2026-04-14T13:23:44Z•4fb559251e266783258c6cfa56a939dac383dafbc09bcf8f1fb0b97ad1d80427
Android 17Android scam protectionDBSCIPILLM securityMerkle Tree CertificatesPQCVRPcertificate transparencychromecookie theftdevice bound session credentialsdns parserindirect prompt injectionmemory-safetymodem securitypixel basebandpost-quantum cryptographyquantum-safe HTTPSrustscam protectionsession theftvulnerability rewards program
What happened
A set of Google Security Blog updates (Feb–Apr 2026) covering multiple defensive initiatives: Google integrated a memory-safe Rust DNS parser into the Pixel modem firmware to reduce memory-safety risks in the baseband; Chrome rolled out Device Bound Session Credentials (DBSC) to prevent stolen cookies from being reused (Windows in Chrome 146, macOS soon); Google Workspace is strengthening defenses against indirect prompt injection (IPI) for LLM-driven apps; the Vulnerability Rewards Program (VRP) published its 2025 year-in-review; Android is beginning Android 17 beta tests for Post‑Quantum-Cry
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- 4fb559251e266783258c6cfa56a939dac383dafbc09bcf8f1fb0b97ad1d80427
- Enrichment time
- 2026-04-14T13:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.