Google Workspace’s continuous approach to mitigating indirect prompt injections
2026-04-05T13:23:43Z•b3e161ea108188ed4ee0a5fe515347e09fc3ec7f75f4fe8dd90d87428025f535
AI securityAndroid 17Android theft protectionCertificate TransparencyChromeGeminiGoogle PlayGoogle WorkspaceHTTPSIPILLM securityMTCMerkle Tree CertificatesNISTPLANTSPQCVRPVulnerability Rewards Programapp securitybiometricsfailed authentication lockindirect prompt injectionpost-quantum cryptographyscam protectionthreat modeling
What happened
A set of Google Security Blog posts covering multiple defensive initiatives: continuous mitigation of indirect prompt injection (IPI) threats against Workspace/Gemini through layered, evolving LLM defenses; a VRP 2025 year-in-review highlighting long-running vulnerability reward activity; a multi-year migration to post-quantum cryptography (PQC) with Android beginning PQC experiments in the Android 17 beta; Chrome and partners developing Merkle Tree Certificates (MTCs) via the IETF PLANTS working group to make HTTPS certificate flows quantum-safe and scalable; expanded Android scam-protection,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- b3e161ea108188ed4ee0a5fe515347e09fc3ec7f75f4fe8dd90d87428025f535
- Enrichment time
- 2026-04-05T13:23:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.