Google Online Security Blog: May 2017

152 captures

03 Jul 2017 - 11 Jul 2026

Mar	APR	May
	15
2021	2022	2023

success

fail

About this capture

COLLECTED BY

Collection: Media Cloud

A longitudinal web archival collection based on URIs from the daily feed of Media Cloud that maps news media coverage of current events.

TIMESTAMPS

The Wayback Machine - https://web.archive.org/web/20220415035031/https://security.googleblog.com/2017/05/

Security Blog

The latest news and insights from Google on security and safety on the Internet

New Built-In Gmail Protections to Combat Malware in Attachments

May 31, 2017

Posted by Sri Somanchi, Product Manager, Gmail anti-spamnew security features for Gmail customersblockConstantly improving our automatic protectionsways

Rejecting the message and notifying the sender if we detect a virus in an email.

Preventing you from sending a message with an infected attachment.

Preventing you from downloading attachments if we detect a virus.

These protections were made possible due to extensive contribution from Vijay Eranti & Timothy Schumacher (Gmail anti-spam) & Harish Gudelly (Google anti-virus) & Lucio Tudisco (G Suite anti-abuse)

OSS-Fuzz: Five months later, and rewarding projects

May 8, 2017

Posted by Oliver Chang, Abhishek Arya (Security Engineers, Chrome Security), Kostya Serebryany (Software Engineer, Dynamic Tools), and Josh Armour (Security Program Manager)announcedOSS-Fuzzfuzzing471,000264

Breakdown of the types of bugs we’re finding

Notable results 1017338102597CVE-2017-3732timeout and out-of-memory failuresAnnouncing rewards for open source projects ideal integrationPatch Rewardsfuzz targets

Fuzz targets are checked into their upstream repository and integrated in the build system with sanitizer support (up to $5,000).

Fuzz targets are efficient and provide good code coverage (>80%) (up to $5,000).

Fuzz targets are part of the official upstream development and regression testing process, i.e. they are maintained, run against old known crashers and the periodically updated corpora (up to $5,000).

The last $5,000 is a “l33t” bonus that we may reward at our discretion for projects that we feel have gone the extra mile or done something really awesome.

reach outThe future

Protecting You Against Phishing

May 5, 2017

Posted by Mark Risher, Director, Counter Abuse Technologyphishing campaignHow the campaign worked and how we addressed it

Using machine learning-based detection of spam and phishing messages, which has contributed to 99.9% accuracy in spam detection.

Providing Safe Browsing warnings about dangerous links, within Gmail and across more than 2 billion browsers.

Preventing suspicious account sign-ins through dynamic, risk-based challenges.

Scanning email attachments for malware and other dangerous payloads.

How users can protect themselves

Take the Google Security Checkup, paying particular attention to any applications or devices you no longer use, as well as any unrecognized devices.

Pay attention to warnings and alerts that appear in Gmail and other products.

Report suspicious emails and other content to Google.

How G Suite admins can protect their users

Review and verify current OAuth API access by third-parties.

Run OAuth Token audit log reports to catch future inadvertent scope grants and set up automated email alerts in the Admin console using the custom alerts feature, or script it with the Reports API.

Turn on 2-step verification for your organization and use security keys.

Follow the security checklist if you feel that an account may be compromised.

Help prevent abuse of your brand in phishing attacks by publishing a DMARC policy for your organization.

Use and enforce rules for S/MIME encryption.

tips and tools

Labels

Archive

2022
- Apr
- Mar
- Feb
- Jan

2021
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2020
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2019
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2018
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2017
- Dec
- Nov
- Oct
- Sep
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2016
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2015
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2014
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- Apr
- Mar
- Feb
- Jan

2013
- Dec
- Nov
- Oct
- Aug
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2012
- Dec
- Sep
- Aug
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2011
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb

2010
- Nov
- Oct
- Sep
- Aug
- Jul
- May
- Apr
- Mar

2009
- Nov
- Oct
- Aug
- Jul
- Jun
- Mar

2008
- Dec
- Nov
- Oct
- Aug
- Jul
- May
- Feb

2007
- Nov
- Oct
- Sep
- Jul
- Jun
- May

Feed

Give us feedback in our Product Forums.

Google
Privacy
Terms