NewApp Digest
search bot

Android security

Ledger Atom: Ledger's $849 Android Security Device Ships 2027
AppWizard
October 15, 2026

Ledger Atom: Ledger’s $849 Android Security Device Ships 2027

Ledger has introduced the Ledger Atom, a hardware signer designed to run standard Android applications while ensuring robust security features. It operates on a dual-mode system, using Android Open Source Project software for everyday tasks and Ledger OS on a Common Criteria EAL6+ certified Secure Element for sensitive operations. The device features a secure chip, a dedicated screen, and a Privacy Switch to disable the camera and microphone. It is equipped with a 6.77-inch AMOLED display, a 50 MP rear camera, a 32 MP front camera, and connectivity options including 4G and 5G via eSIM. The Atom is a data-only device that does not support traditional voice calls or SMS. It is priced at 9 for the Founders Edition, with shipping expected in the second quarter of 2027.
Your Android phone could be infected before you turn it on
AppWizard
October 9, 2026

Your Android phone could be infected before you turn it on

Bitdefender researchers have identified a malware campaign called Midnight Mimosa that can be embedded in the software of low-cost Android devices before sale. This malware operates stealthily, allowing it to install and remove applications without user knowledge, generate fraudulent advertising activity, and convert devices into residential-proxy relay nodes for a botnet. It has been found on MediaTek-based, white-label devices marketed under misleading names. Users should be cautious of suspiciously cheap devices and look for signs of infection, such as unexplained ads, unfamiliar apps, sudden battery drain, and discrepancies in model names. Standard uninstallation or factory resets may not remove this malware, and users are advised to update their devices, review app lists, and contact sellers for refunds or replacements if they suspect infection. Mobile protection solutions can help monitor app behavior and alert users to potential threats.
Google's Android Security State Libraries Enable Component-Level Security Verification
AppWizard
October 5, 2026

Google’s Android Security State Libraries Enable Component-Level Security Verification

Google has launched AndroidX Security State libraries, enabling applications to verify security patch status at a granular level for individual components. This allows developers to conduct precise security verifications tailored to their applications' needs. The libraries categorize security patch levels into Device SPL, Published SPL, and Available SPL, providing enhanced visibility into device security. Functions such as queryAllAvailableUpdates() and areCvesPatched() help identify pending updates and check CVE status. The Security State Provider library standardizes communication for update notifications among OEMs.
GrapheneOS Isn't Happy With Google Over Pixel's Widening Head Start
AppWizard
September 18, 2026

GrapheneOS Isn’t Happy With Google Over Pixel’s Widening Head Start

Google's September 2026 Pixel Update Bulletin includes patches that affect standard Android platform code, relevant to both Pixel and non-Pixel devices, which have not been included in the regular monthly Android Security Bulletin. GrapheneOS has noted that Android 17 QPR1 introduced new developer APIs not present in the Android Open Source Project (AOSP) for the first time since Android Honeycomb, with one new package and modifications to sixteen others. GrapheneOS is backporting Pixel firmware and drivers from QPR1 onto Android 17 but lacks permissions to distribute this work. Additionally, there has been a delay in Google’s compliance with a GPL source request, with access granted over two weeks after the initial request. Starting in 2027, Google will require all Android app developers to register with them and provide legal identification and signing key evidence, complicating the process of sideloading unverified apps. GrapheneOS and other organizations are advocating for the Keep Android Open campaign against these developments, which may restrict competition and tighten Google's control over the Android ecosystem.
Android apps can now check security patches down to individual device components
AppWizard
September 18, 2026

Android apps can now check security patches down to individual device components

The new AndroidX Security State libraries, with stable releases of Security State v1.1.0 and Security State Provider v1.0.0, allow developers to evaluate the security status of individual device components. They provide three levels of security patch information: Device Security Patch Level (DSPL), Published Security Patch Level (PSPL), and Available Security Patch Level (ASPL). These libraries enable checks on critical components of the Android operating system, including system modules and the Linux kernel, which are represented by version numbers rather than monthly patch dates. Applications that prioritize security can utilize this detailed patch information to assess vulnerabilities, particularly those tracked as Common Vulnerabilities and Exposures (CVEs). The libraries also integrate with the Open Source Vulnerabilities (OSV) database for access to Android Security Bulletin data and device-specific vulnerability reports. Additionally, Android 17 allows manufacturers to declare individual security fixes beyond the stated security patch level, and Google is working with manufacturers to transition their OTA update clients to this new standardized system.
Google Pixel: Android 17 QPR2 Beta 5 Released
AppWizard
September 17, 2026

Google Pixel: Android 17 QPR2 Beta 5 Released

On September 15, 2026, Google released the beta OS update "Android 17 QPR2 Beta 5" for Google Pixel devices in the Android Beta Program. This update includes support for new Pixel devices: "Pixel 11," "Pixel 11 Pro," "Pixel 11 Pro XL," and "Pixel 11 Pro Fold," while excluding "Pixel 6" and "Pixel 6 Pro." The update is distributed via Over-the-Air (OTA) to 23 models, including "Pixel 6a," "Pixel 7," and "Pixel 8 Pro." Key features include "Call Forwarding Hardening," which restricts access to call-forwarding USSD codes to enhance security against scams. The update also includes eight bug fixes, addressing issues with Bluetooth device type display, unexpected reboots, volume slider UI, text rendering, Private Space unlocking, HDR mode, Camera app crashes, and Bluetooth audio distortion. The build number changes to "CP41.260828.004.A8" or "CP41.260828.005.A6," with the Android security patch level updated to "August 5, 2026," and "Google Play services" upgraded to version 26.28.33 or later.
Android Google Play System Update Rolling Out for September 2026 (September 9, 2026)
AppWizard
September 10, 2026

Android Google Play System Update Rolling Out for September 2026 (September 9, 2026)

On September 9, 2026, Google rolled out the “Google Play System Update” for Android devices, which is part of the monthly “Google System Updates” aimed at enhancing security and reliability. The update reflects an “Update date: September 1, 2026,” and includes improvements to the app version of “Mainline services,” updated to version v2026-09-01S+. Users can check for the update in device settings under [Security & privacy] → [System & updates] → [Google Play system update], or through the “Mainline services” app, available since November 19, 2025.
Search