Android developers announced, “In Android 17, the platform continues its shift toward a ‘secure-by-default’ architecture, introducing a suite of enhancements designed to mitigate high-severity exploits such as phishing, interaction hijacking, and confused deputy attacks. This update requires developers to explicitly opt in to new security standards to maintain app compatibility and user protection.”Therelease notesstate that certificate transparency (CT) is enabled by default on Android 17 — apps had to opt in on Android 16.Other improvements include a new install-time permission that aims to improve platform security and user privacy around localhost protections.Android developers plan on achieving platform stability by March, and then testers will have several more months to review the mobile operating system until the final release becomes available.Related:Android Zero-Days Patched in December 2025 Security UpdateRelated:New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android DevicesRelated:Critical Dolby Vulnerability Patched in Android

Therelease notesstate that certificate transparency (CT) is enabled by default on Android 17 — apps had to opt in on Android 16.Other improvements include a new install-time permission that aims to improve platform security and user privacy around localhost protections.Android developers plan on achieving platform stability by March, and then testers will have several more months to review the mobile operating system until the final release becomes available.Related:Android Zero-Days Patched in December 2025 Security UpdateRelated:New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android DevicesRelated:Critical Dolby Vulnerability Patched in Android

Other improvements include a new install-time permission that aims to improve platform security and user privacy around localhost protections.Android developers plan on achieving platform stability by March, and then testers will have several more months to review the mobile operating system until the final release becomes available.Related:Android Zero-Days Patched in December 2025 Security UpdateRelated:New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android DevicesRelated:Critical Dolby Vulnerability Patched in Android

Android developers plan on achieving platform stability by March, and then testers will have several more months to review the mobile operating system until the final release becomes available.Related:Android Zero-Days Patched in December 2025 Security UpdateRelated:New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android DevicesRelated:Critical Dolby Vulnerability Patched in Android

Related:Android Zero-Days Patched in December 2025 Security UpdateRelated:New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android DevicesRelated:Critical Dolby Vulnerability Patched in Android

Related:New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android DevicesRelated:Critical Dolby Vulnerability Patched in Android

Related:Critical Dolby Vulnerability Patched in Android

Eduard Kovacs (@EduardKovacs) is the managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Attendees will walk away with guidance for how to build robust identity defenses, unify them under a consistent security model, and ensure business operations move quickly without compromise.

SecurityWeek’s 2026 Ransomware Summit will discuss a roadmap for defending the enterprise, from mitigating root causes to mastering recovery, giving security teams the critical insights needed to navigate and neutralize today’s ransomware extortion threats.

Source: SecurityWeek