Bringing Rust to the Pixel Baseband

This Google Security Blog roundup covers multiple platform and product security updates: Google integrated a memory-safe Rust DNS parser into the Pixel modem firmware to reduce memory-safety vulnerabilities after prior Project Zero modem RCE findings; Chrome and Google Accounts rolled out Device Bound Session Credentials (DBSC) to prevent cookie-based session theft against infostealer malware; Workspace protections and ongoing defenses against indirect prompt injection (IPI) for LLM-based apps were described; the Vulnerability Rewards Program (VRP) 2025 year-in-review highlighted ongoing bug-b