SafetyCore Archives

AppWizard

August 26, 2026

A mysterious app just showed up on your Android phone, and it’s watching your battery

Android Pulse is a diagnostic tool distributed by Google since March, which has recently become visible to the public and is now on over 10 million devices. It operates without a user interface and monitors software for unusual system resource consumption. The app first appeared in March with seven builds before being listed in the Play Store. On Pixel devices, it is found in system settings, while on others, it appears as a blank square in the update queue. There was no formal announcement regarding its rollout. Europe has enacted regulations to enhance user control over devices, but essential system applications like Android Pulse are exempt from easy uninstallation. There is no evidence that Android Pulse poses a danger, but its late visibility raised user concerns.

AppWizard

July 1, 2026

These Google Apps Need To Be Manually Updated On Your Samsung Phone

Google has rolled out updates for three system applications on Samsung Galaxy devices: Android System SafetyCore (version 0.925574157), Android System WebView (version 149.0.7827.91), and Google Play Services (version 26.22.33). These updates are not listed in the "Available updates" section of the Play Store and may require manual updating. Android System SafetyCore helps protect users from unwanted content, Android System WebView is essential for displaying web content in apps, and Google Play Services manages various functions like app updates and user privacy settings. To manually update these apps, users should go to Settings > Apps, select the app, and tap "App details in store" to access the Play Store. If other apps are not updating, users should ensure a stable internet connection, restart the phone, clear storage space, update the Android version, clear app caches, and check the system date.

AppWizard

June 19, 2026

These crucial Google services on Samsung phones may be waiting for you to update

Google has begun rolling out updates for the Android System SafetyCore (version 1.0.925574157), Android System WebView (version 149.0.7827.91), and Google Play Services (version 26.22.33) on Samsung devices. Users must manually update these apps by navigating to the Settings menu, locating the Apps section, and selecting "App details in store" for each app. The updates are available for devices running One UI 8.5 and One UI 9 in India, with uncertain availability in other markets.

AppWizard

April 29, 2026

New Android spyware Morpheus linked to Italian surveillance firm

Morpheus is a new spyware identified by the nonprofit organization Osservatorio Nessuno, which spreads through counterfeit Android applications that appear as legitimate updates. Attackers use SMS messages to direct victims to a fraudulent website mimicking an Internet Service Provider (ISP). The spyware installs a dropper app that deploys a concealed payload, which disguises itself as legitimate system components and manipulates users into granting dangerous permissions, including Accessibility access. Once granted, Morpheus initiates a Permission Workflow that creates a fake update overlay, disabling the touchscreen to prevent user interaction. It ensures persistence by restarting after device reboots and can request device administrator privileges. The spyware exploits overlay windows and Accessibility features to gain control of the device and bypass security measures, including disabling antivirus solutions without requiring root access. Analysis suggests Morpheus has Italian origins, with connections to an Italian firm, IPS Intelligence, known for lawful interception technologies. The spyware is capable of invasive actions such as recording audio and video, linking to WhatsApp, and compromising device security. The report highlights a network of dubious companies and shared contacts linked to the spyware's distribution.

AppWizard

August 15, 2025

Google Messages can now blur nude images on Android

Google is rolling out Sensitive Content Warnings in its Messages app for Android, a feature that detects and blurs images containing nudity. This feature is available only to users signed into a Google Account. When an image is blurred, users can access a resource page, block the sender, return to the main screen, or choose to view the image. A warning will also appear when users attempt to send or forward a nude image, requiring acknowledgment before sending. For supervised users, such as minors, the feature is enabled by default, while unsupervised teens can disable it. Adults must opt in to use it. The feature processes images locally on the device, ensuring no identifiable data is sent to Google servers, although it may misclassify images or fail to detect nudity.

AppWizard

April 22, 2025

You Can Now Make Google Messages Blur NSFW Images

Google is introducing a feature in Google Messages that automatically detects and blurs nude photos sent to Android devices, displaying a sensitive content warning before explicit images can be viewed. This feature includes options to block numbers sending inappropriate images and alerts users when they attempt to send or forward such content. Users can enable sensitive content warnings in the Google Messages settings, while for users under 18, the feature is automatically activated. The detection processes occur on-device using Android's SafetyCore technology, ensuring user privacy and security. The feature is currently being tested on select Android devices running the Messages beta and does not extend to videos.

AppWizard

April 22, 2025

Google Messages now finally shields you from surprise nudes

Google Messages is introducing smart alerts that automatically blur explicit images before they are viewed by the recipient. This feature is opt-in for adults, while it is enabled by default for teens. Users will receive warnings about potentially explicit images and can choose to view the image, block the sender, or check the reason for the flag. If users send a sensitive image, the app will prompt them with a caution. All processing occurs on the user's device to protect privacy, and the feature currently applies only to still images, not videos.

AppWizard

March 11, 2025

Google tracks Android users before they open apps, report says

A study by D.J. Leith at Trinity College Dublin found that Google begins tracking users on Android devices even before they interact with them, creating at least 14 cookies and trackers without user consent. These tracking mechanisms operate immediately upon device setup and continue to collect data even when the device is idle, following a factory reset. The sign-in process with Google accounts automatically connects users to various preinstalled applications, raising concerns about user autonomy. Notable trackers include the DSID cookie and the Google Android ID, which persist through factory resets. Users face challenges in managing tracking settings, as there is no straightforward way to opt out or delete these tracking elements. Additionally, Google's recent installation of SafetyCore on devices occurred without user consent, while the Results About You tool for managing data removal from Google Search was more positively received.

AppWizard

March 4, 2025

Google’s ‘consent-less’ Android tracking probed by academics

Research by Doug Leith, a professor at Trinity College Dublin, shows that Android users are subjected to advertising cookies and tracking mechanisms that start collecting data before any app is launched, without user consent or the option to opt out. The study identifies systems within Android that send user data to Google via pre-installed apps like Google Play Services and the Google Play Store. One such mechanism is the "DSID" cookie, which is created shortly after logging into a Google account and is used for personalized advertising, lasting two weeks. Another tracker, the Google Android ID, is generated upon first interaction with Google Play Services and continues to transmit data even after the user logs out, with removal only possible through a factory reset. Leith's findings raise concerns about potential violations of data protection laws, particularly regarding the classification of the Android ID as personally identifiable information under GDPR. Google responded to the findings, emphasizing user privacy and compliance with privacy laws, while also stating disagreement with Leith's legal analysis. Additionally, the introduction of the Android System SafetyCore feature, which scans photo libraries for explicit content without user consent, has sparked user discontent, with many reviews criticizing the lack of consent during its installation.

AppWizard

February 27, 2025

Google’s SafetyCore App Secretly Scans All Photos on Android Devices

Google's SafetyCore app was launched in October 2023 as part of system updates for Android devices, designed to classify content like spam and explicit material through on-device image analysis. It operates locally using machine learning, avoiding cloud uploads, and is promoted as a privacy-enhancing feature. However, it requires 2GB of storage and operates in the background without prior user disclosure, leading to criticism regarding its transparency and potential privacy implications. Users discovered its existence through online discussions, with some labeling it as "spyware." Although Google claims that SafetyCore only activates upon app requests and does not report findings back to the company, the closed-source nature of the app raises concerns about independent audits and user trust. Advocates for privacy emphasize the need for transparency in technology, especially regarding features that access personal data. Users can disable SafetyCore through the Settings menu, but many remain unaware of this option. The situation highlights a broader issue of balancing innovation with user consent in the tech industry.