All articles tagged with #android security
Google's Android 17 QPR2 Beta 3 adds a SIM security timeline to log modem-detected threats (IMEI/IMSI), a SIM security info screen detailing active encryption ciphers across calls, SMS, and data, and new notifications warning about a broader range of cellular attacks (DoS, jamming, imprisonment, downgrade, location tracking).
Google's Threat Analysis Group dismantled a massive IPIDEA-linked residential proxy network that covertly turned up to 9 million Android devices into data exit nodes via bundled SDKs; with a federal court order, Google shut down the backend infrastructure, marking the largest such takedown. IPIDEA claimed legitimate purposes, but the system exploited Android permissions and wasn't traditional malware, highlighting the risk of SDK-based data flows and the dangers of downloading apps from sketchy sources.
Samsung has released the December 2025 security update for various Galaxy devices in the US, including the Galaxy S24 series, which enhances security with 68 fixes and introduces improvements for system stability. Additionally, Samsung is working on One UI 8.5, with hints of new camera features and ongoing testing for the Galaxy S23 FE and other models, leading up to the upcoming Galaxy S26 series.
Google is shifting to a risk-based security update system for Android, prioritizing high-risk vulnerabilities in monthly releases and handling less critical issues quarterly, to improve device security and update efficiency, though this may extend the window for potential exploits and complicate source code releases.
Google has released the July 2025 software update for supported Pixel devices, including the Pixel 6a, which introduces security patches, performance improvements, and initiates the Pixel 6a's Battery Performance Program, potentially affecting battery life for impacted devices after 400 charge cycles. Notably, the update excludes the Pixel 6 and 6 Pro and contains no Android security patches this month.
A new warning has been issued about "SpyLoan" apps, which have been installed on over 8 million Android devices. These apps, identified by McAfee, exploit social engineering tactics to extract sensitive information and money from users. Despite being available on the Google Play Store, these apps engage in permission abuse and malicious practices. Google has removed some of these apps and advises users to enable Play Protect and regularly update their devices to avoid such threats.
Google has released the March 2024 Pixel Feature Drop, bringing the latest Android security patches to Pixel devices, including the Pixel Fold and Pixel Tablet. The update includes critical security fixes and is also being rolled out to supported non-Pixel devices according to each manufacturer's update policy. Additionally, the Pixel Watch is receiving the update, although the security bulletin for it lacks details on the vulnerabilities addressed.
A new cybercrime operation called 'SecuriDropper' has been discovered, using a method to bypass Android's 'Restricted Settings' feature and install malware on devices. This feature was designed to prevent side-loaded applications from accessing powerful features like Accessibility Services and Notification Listener. SecuriDropper poses as legitimate apps, such as Google apps or security apps, and installs a second payload that is some form of malware. The operation obtains permissions through user deception and interface manipulation. This is the first observed case of this method being used in cybercrime operations targeting Android users.
Google Pixel phones are receiving the May Android security update, with bug fixes for touch screen response on the Pixel 7 Pro and lock screen UI elements overlapping with the home screen launcher interface on all Pixel devices. The update is available for Pixel 4a up through Pixel 7 Pro, and users can either wait for the over-the-air update or manually update using factory images or OTA files.