Bringing Rust to the Pixel Baseband

This collection of Google security posts covers multiple platform- and product-level security initiatives: Google integrated a memory-safe Rust DNS parser into Pixel modem firmware to reduce memory-safety vulnerabilities in a high-risk baseband (motivated by prior Project Zero remote RCE findings). Chrome rolled out Device Bound Session Credentials (DBSC) to prevent stolen browser cookies from being reused by infostealer malware (Windows available in Chrome 146, macOS coming). Google Workspace teams described ongoing defenses against indirect prompt injection (IPI) targeting complex LLM apps.