Skip to main content

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management.

By Editor

http://informationispowah.blogspot.com/2023/04/google-launches-new-cybersecurity.html

Read details in this link.

#Information_is_Power

#we_inform_the_uninformed

Google on Thursday outlined a set of initiatives aimed at improving the vulnerability management ecosystem and establishing greater transparency measures around exploitation.

“While the notoriety of zero-day vulnerabilities typically makes headlines, risks remain even after they’re known and fixed, which is the real story,” the company said in an announcement. “Those risks span everything from lag time in OEM adoption, patch testing pain points, end user update issues and more.”

Security threats also stem from incomplete patches applied by vendors, with a chunk of the zero-days exploited in the wild turning out to be variants of previously patched vulnerabilities.

Mitigating such risks requires addressing the root cause of the vulnerabilities and prioritizing modern secure software development practices to eliminate entire classes of threats and block potential attack avenues.

Taking these factors into consideration, Google said it’s forming a Hacking Policy Council along with Bugcrowd, HackerOne, Intel, Intigriti, and Luta Security to “ensure new policies and regulations support best practices for vulnerability management and disclosure.”

The company further emphasized that it’s committing to publicly disclose incidents when it finds evidence of active exploitation of vulnerabilities across its product portfolio.

Lastly, the tech giant said it’s instituting a Security Research Legal Defense Fund  to provide seed funding for legal representation for individuals engaging in good-faith research to find and report vulnerabilities in a manner that advances cybersecurity.The goal, the company noted, is to escape the “doom loop” of vulnerability patching and threat mitigation by “focusing on the fundamentals of secure software development, good patch hygiene, and designing for security and ease of patching from the start.”

Google’s latest security push speaks to the need for looking beyond zero-days by making exploitation difficult in the first place, driving patch adoption for known vulnerabilities in a timely manner, setting up policies to address product life cycles, and making users aware when products are actively exploited.

It also serves to highlight the importance of applying secure-by-design principles during all phases of the software development lifecycle.

The disclosure comes as Google launched a free API service called  deps.dev API in a bid to secure the software supply chain by providing access to security metadata and dependency information  for over 50 million versions of five million open source packages found on the Go, Maven, PyPI, npm, and Cargo repositories.

In a related development, Google’s cloud division has also announced the general availability  of the Assured Open Source Software (Assured OSS) service for Java and Python ecosystems.

Source: THN 

Labels:

Comments

Post a Comment

Popular posts from this blog

UGANDA ELECTORAL COMMISSION TO ELIMINATE NATIONAL IDENTIFICATION CARDS (IDs) FOR 2021 GENERAL ELECTIONS.

By Editor
The elimination of using National IDs (Ndagamuntu) for the 2021 elections should not have come as a surprise. One would be very NAIVE to think that Bobi Wine has not prepared for this in his Business Plan under the RISK section. It is public knowledge that our EC is not independent.  It is also public knowledge that Military Dictator Yoweri Museveni will never lose an election. What stunned us this morning is when we noticed that on social media, people were mocking Bobi with his "get your Ndagamuntu".  We are on record for saying to all Our readers that the National ID is like Apartheid in South Africa. Students of History would know how those IDs were being used to arrest people, deny them jobs, deny them basic services. Consequently, Bobi was not wrong and will never be wrong on the Ndagamuntu. Except the ones attacking him and mocking him forget that in Uganda, now, no National ID (Ndagamuntu), no service.  If you have not been denied registering your child i...
Post a Comment
Read more

Parliament Urges Government to Provide Shs 4 Billion to Media Houses to Run Awareness Campaign on Tourism in Uganda.

By Editor
Parliament also urged Gov’t to provide additional Shs4Bn to UTB to engage international and national media houses in production of positive media stories for improved destination image, following reports of drop in number of tourists from US, Europe and China visiting Uganda. "The National Development Plan targeted to cumulatively attract 281,760 International Tourist arrivals from US, Europe & China but only 67,252 arrivals were registered by the end of the first half of FY 2023/24. The U.S, Europe & China were key target source for leisure tourist who stay longer than business tourists. However, statistics show that international arrivals from the aforementioned areas have continue to drop. The UTB requires Shs4Bn to engage international & national media houses in production of positive tourism stories to improve destination perception in light of recent controversies that shade the destination in a bad light. However, this has remained unfunded,” said La...
Post a Comment
Read more

UPDF has Rehabilitated Boreholes and Shallow Wells in Maracha District Ahead of 45th Tarehe Sita.

By Editor
Story by Osuta Yusuf. Maracha District.  30-12-2025. 📸: The technical team fixing some of the  boreholes. Photo by Osuta Yusuf, Our News Reporter. The Uganda Peoples Defence Forces (UPDF) which is the legally constituted security organ to guard and protect the people, properties and sovereignty of Uganda, have rehabilitated a total of 9 Boreholes and shallow wells at the tune of 15m Shs in 7 Sub-counties out of the 19 Sub-counties in Maracha District through a service dubbed under the Theme of “QUICK IMPACT PROJECT” directly financed by the UPDF, ahead of preparation for the celebration of their next year's 2026 Tarehe Sita anniversary. 📸: Official launch of UPDF’s 45th Tarehe Sita celebration ahead of the due date 6-February-2026. Courtesy Photo. The UPDF Tarehe Sita is an annual public holiday and event that takes place on every 6th of February, the date when the then Uganda Patriotic Movement (UPM) party now turned as National Resistance Army / Movement (NRA / M) headed b...
Post a Comment
Read more