"Android 14: Strengthening Security Against Cellular Attacks and Unencrypted Networks"
Google has revealed the cellular connectivity security features in Android 14, including the ability to restrict devices from downgrading to 2G connectivity and disabling support for null-ciphered connections. These measures aim to protect against network packet injection, tampering, and eavesdropping on user traffic. The new features address the vulnerability of existing mobile devices that still support 2G networks, which can be remotely triggered in malicious attacks. Android Enterprise-managed devices can now restrict 2G connectivity and counter traffic interception and Person-in-the-Middle attacks. The disabling of null ciphers at the modem level protects voice and SMS traffic from over-the-air interception, safeguarding sensitive information such as One-Time Passwords and 2FA.