Latest news with #AndroidSecurity


Forbes
2 days ago
- Forbes
Google Chrome Updates To Stop August 5 For 300 Million Android Users
Google confirms it will stop updateng Chrome for 300 million Android users in August. If there is one thing you can guarantee in life, other than death and taxes, it's that Google will update the Chrome web browser with alarming frequency to fight off attacks using newly discovered security vulnerabilities. That guarantee will disappear for an estimated 300 million Android users starting August 5. Here's what you need to know. 300 Million Android Devices To Not Longer Get Chrome Security Updates According to the latest estimates, 4% of the Android user base of 3.3 billion still use Android 8 and another 5.8% use Android 9. While the percentages might seem insignificant in the overall scheme of things, that's a combined total of more than 300 million devices. It's also 300 million devices that will no longer benefit from security updates for the Google Chrome browser from August 5. Ellen T, a Chrome support manager at Google, has now officially confirmed in a Google Chrome community posting, that 'Chrome 138 is the last version of Chrome that will support Android 8.0 and Android 9.0.' With Chrome 139 being expected to arrive on August 5, and requiring devices to be running Android 10.0 or later, this means that you will 'need to ensure your device is running Android 10.0 or later to continue receiving future Chrome releases,' Ellen T said. It's important to note that older versions of the Google Chrome web browser app will continue to work just fine on older Android smartphones and tablets. Assuming that your definition of just fine includes being open to attack by anyone armed with an exploit for the latest security vulnerabilities. Indeed, as time passes, and those security vulnerabilities become common knowledge, with exploits exchanged in criminal forums online, the threat will only increase for any users who have not either updated to a more recent operating system or switched to a different browser app. You know what to do, and the correct answer is most certainly not nothing. You have been warned.


Fox News
18-06-2025
- Fox News
Android security upgrades outsmart scams and protect your privacy
With the increasing sophistication of digital threats, safeguarding your phone and personal data has never been more crucial. Android is responding with a suite of new security features designed to protect you from scams, fraud, and device theft. These enhancements are primarily rolling out to devices running Android 16. Some protections, such as enhanced theft protection and AI-powered scam detection, are also becoming available on select devices running Android 10 and later via Google Play Services updates. The most advanced features, including Identity Check and device-level Advanced Protection, are initially launching on Google Pixel and Samsung devices with One UI 7, with plans to expand to other manufacturers as they update to Android 16. Let's take a look at how these innovations are making Android security smarter and more comprehensive. Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join. Phone scammers are becoming increasingly creative, often attempting to trick people into changing device security settings or granting risky permissions during calls. Android's new in-call protections add a layer of defense by blocking certain actions during calls with non-contacts. For example, you won't be able to disable Google Play Protect, sideload an app for the first time, or grant accessibility permissions while on a call with someone not in your contacts. If you're screen-sharing during a call, Android will prompt you to stop sharing when the call ends. Android's AI-powered Scam Detection in Google Messages and Phone by Google is now even more intelligent. It can identify suspicious conversation patterns in real-time and warn you before you fall victim to a scam. This protection covers a wide range of scams, including toll road and billing fee scams, cryptocurrency scams, financial impersonation scams, gift card and prize scams, tech support scams, and more. All message analysis happens on your device, so your conversations stay private. Availability can vary depending on your device, region, and carrier. If you don't see these features yet, make sure your app is updated and keep an eye out as Google continues to expand support to more users worldwide. To help protect you from scammers who try to impersonate someone you know, Android is rolling out Key Verifier in Google Messages. This feature lets you and your contact verify each other's identity using public encryption keys, either by scanning a QR code or comparing numbers. If a contact's verification status changes, like after a SIM swap, you'll see a warning, giving you extra confidence that you're talking to the right person. If you've ever used Android's Find My Device to track down a lost phone or set of keys, you know how helpful it can be. Now, Find My Device is evolving into Find Hub, making it easier to keep track of your devices, family, and friends all in one place, with more partner brands joining the network. Find Hub is also becoming more personalized. Whether you want built-in luggage tracking from July and Mokobara, ski protection with Peak integration, or Disney-themed Bluetooth tags from Pixbee, there are options to suit different needs. Soon, tags that are enabled with ultra-wideband, starting with moto tag, will provide improved nearby location tracking. Later this year, Find Hub will include satellite connectivity, allowing you to stay connected with friends and family even when cellular service is unavailable. For travelers, new partnerships with airlines such as Aer Lingus, British Airways, Cathay Pacific, Iberia, and Singapore Airlines will let you share your Bluetooth tag's location directly with these airlines. This should make recovering lost luggage easier and less stressful. Android continues to strengthen its theft protection features. The new Identity Check adds an extra layer of security if your PIN or password is compromised, and it's rolling out to more devices with Android 16. Factory Reset Protection is getting tougher, restricting all functionalities on devices reset without the owner's authorization. Remote Lock now includes a security challenge question to prevent unauthorized use, and one-time passwords will be hidden on the lock screen in higher-risk scenarios. For those who want even stronger security, Advanced Protection is now available as a device-level setting in Android 16. This combines Google's most robust security tools, like intrusion logging and scam call detection, into one setting that can't be turned off without unenrolling. Whether you're a journalist, a public figure, or just want extra peace of mind, Android 16 makes it easy to activate Advanced Protection. This suite of features brings together Google's top security tools, like Intrusion Logging, USB protection, and scam detection for calls, into one powerful setting. Once enabled, these protections can't be turned off, shielding you against even the most sophisticated attacks. And new features are on the way, including tighter controls over app permissions and network connections. To turn on Google's Advanced Protection, follow these steps: Settings may vary depending on your Android phone's manufacturer. You may be prompted to verify your identity (such as entering your password or using biometric authentication). Once you've completed the steps, you'll see a confirmation that Advanced Protection is active. Note: After activation, these protections cannot be turned off without unenrolling from Advanced Protection. You can review and adjust related security settings within the Advanced Protection menu, such as app permissions and network controls, as new features become available. If you don't see the option, make sure your device is updated to Android 16 and check for any additional requirements, such as a Google account or specific device compatibility. Some features may require additional verification steps, like using a security key or two-factor authentication, especially if you're enrolling for the first time or on a new device. While Android is doing a lot to protect you, there are a few extra steps you can take to boost your security: Install strong antivirus software: This adds another layer of defense against malware and suspicious apps. Google Play Protect, which is built-in malware protection for Android devices, automatically removes known malware. However, it is important to note that Google Play Protect may not be enough. Historically, it isn't 100% foolproof at removing all known malware from Android devices. So, you may want to choose a strong antivirus app and keep it updated for maximum protection. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices. Keep your device updated: Always install the latest Android updates to patch any security vulnerabilities. Updates often include important security fixes that protect against new threats. To do this, go to Settings, tap System or About phone, select Software update or System update, then tap Download and Install if an update is available. Use strong, unique passwords: Avoid reusing passwords across different accounts to reduce the risk if one is compromised. Consider a password manager to generate and store complex passwords. Get more details about my best expert-reviewed password managers of 2025 here. Be cautious with app permissions: Only grant apps the permissions they truly need. Review permissions regularly and revoke any that seem unnecessary or intrusive. Enable two-factor authentication: This adds an extra step to your logins, making it more difficult for others to access your accounts. Most major apps and services offer this feature in their security settings. Download apps only from the Google Play Store: Avoid third-party stores, which are more likely to host unsafe apps. The Play Store has security checks that help reduce the risk of downloading malicious software. Regularly review your privacy settings: Make sure you're comfortable with what you're sharing. Adjust settings to limit data sharing and enhance your privacy whenever possible. Consider a personal data removal service: Scammers often start by gathering information about you from public records and data broker sites. Using a personal data removal service can help scrub your personal details from these sites, making it much harder for scammers to target you. If you're concerned about your privacy or just want to take your security to the next level, this is a smart step to consider. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren't cheap and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It's what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you. Check out my top picks for data removal services here. Get a free scan to find out if your personal information is already out on the web. Keeping your phone and personal data secure is more important than ever, but Android is making it easier to stay protected with smarter scam detection, new ways to keep track of your devices and loved ones, and the strongest security features yet. By taking a few extra steps, like using strong passwords, keeping your device updated, and considering a personal data removal service, you're adding even more layers of protection against evolving threats. Security is always changing, but with these tools and habits, you can use your Android device with greater confidence and peace of mind. Who do you think should bear the greatest responsibility for keeping your data safe: tech companies, the government, or you as an individual? Let us know by writing us at For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Follow Kurt on his social channels: Answers to the most-asked CyberGuy questions: New from Kurt: Copyright 2025 All rights reserved.


Forbes
15-06-2025
- Forbes
Critical Google Messages Security Update For 1 Billion Users Confirmed
Google Messages is about to get a lot safer with Key Verifier feature. Although Android 16 has now launched, at least for some device users, and brought with it long-overdue and highly welcome new security protections, users of Google Messages will need to wait a little longer for one critical update. Don't worry, this Google Messages update is coming to an Android device near you very soon indeed, and it really is an anti-scam security game-changer. Here's everything you need to know about the new key verifier feature. Although there's no doubt that Android 16 is a step up in security terms, particularly when it comes to anti-scam protections such as preventing the user from disabling Google Play Protect, sideloading an app or changing app accessibility permission during a call, there is still more work to be done. The good news is not only that Google knows this, but it is acting upon it. I don't use the term critical lightly, when it comes to cybersecurity that would be a poor show indeed, but if ever a new security function deserved the epithet, then Key Verifier for Google Messages is it. Dave Kleidermacher, the vice president of engineering with Google's Android security and privacy team, described the key verifier for Google Messages as providing 'an extra layer of assurance that the person on the other end is genuine' when in conversation with someone. The technical explanation is that the key verifier function is a tool that validates the identity of the person you are in conversation with when using Google Messages by way of public encryption keys that protect the end-to-end messaging. It verifies the contact keys in your Google Contacts, either by you scanning a QR code (yes, I know, but anti-scam protections can also use tools that are abused by scammers) or straightforward number comparison. The non-technical explanation, as Kleidermacher explained, is that it provides a visual way to easily and efficiently confirm that these secret encryption keys match. 'If an attacker gains access to a friend's phone number and uses it on another device to send you a message,' Kleidermacher said, 'their contact's verification status will be marked as no longer verified in the Google Contacts app, suggesting your friend's account may be compromised or has been changed.' Is it perfect? No. Can it provide a 100% guarantee that you are not being scammed? No. Is it a critical weapon in the fight against scammers? Heck yes. Anti-scam protection revolves around a central hub of trust, and the Google Messages key verifier will add confidence to your communications that you are in conversation with the person you think you are, and not a scammer. 'Key Verifier will launch later this summer in Google Messages on Android 10+ devices,' Kleidermacher confirmed. Not long to wait, but in the meantime, continue to be careful out there and stay alert to the phishing threat.


Forbes
09-06-2025
- Forbes
Samsung Warns All Galaxy Users—Restart Your Phone
Restart your phone today. Android is under attack. Google warning that new vulnerabilities 'may be under limited, targeted exploitation' have become alarmingly frequent, as the Android-maker and its OEMs issue critical updates. Meanwhile, smartphone users are advised to watch for signs that their own phones may have been compromised. Separately, restarting phones made headlines over the last 12-months, as first iPhone and then Android introduced an auto-restart after three days of inactivity, making it more difficult for law enforcement or others to plug in cables to extract user data. While some years ago, America's NSA told users to 'turn devices off and on weekly,' that's not a habit that has caught on. Most users leave them on until forced to reboot. But Samsung actually warns its Galaxy users to do the same — and even more frequently. 'Make restarting your Galaxy phone a daily habit,' it says. Automating restarts 'Periodic restarting can prevent problems with your Galaxy phone,' Samsung says, including 'your phone suddenly freezing or [becoming] too slow,' two signs that could — maybe — be the sign of a security issue, albeit will more likely be performance related. 'The issue can sometimes be resolved just by restarting the phone.' Maybe this advice will now catch on, given the raft of new attacks driven primarily by the forensic industry finding more ways to compromise device security. 'Rebooting your phone daily is your best defense against zero-click attacks,' ZDNet now reports. That advice came courtesy of iVerify's Ricky Cole, whose company warned last week that iPhones had likely been attacked through an iMessage vulnerability that has since been patched. Apple says attacks did not take place, but the high-profile victims suggested by iVerify ensured a flurry of headlines followed. There are several ways to restart your Galaxy phone, but the easiest is to automate it. You can set your phone to 'auto-optimize daily' or to restart on a schedule. As long as the phone is not being used and has plenty of battery, it will reboot.


Forbes
29-05-2025
- General
- Forbes
Android Users Need To Update Chrome Now — 8 Security Reasons Why
Update Chrome for Android now. LightRocket via Getty Images Smartphone users have had a rough old time of it lately as far as security issues are concerned. What with everything from specific PIN codes being flagged as insecure, an FBI warning of a new and highly dangerous attack threat, and Google advising about mobile threats targeting Android users. Of course, it's not all been bad news. I've reported how a secret code can stop Android smartphone attacks, and Google's recent Android updates have added smartphone security features anew. Now there's another Android update that Google has just dropped, and this one needs to be implemented as soon as possible. Don't wait, act today. Here are the eight security reasons why. Hardly a week goes by without a Chrome security update being released by Google, and that's a very good thing indeed, as it means your security is being protected. By discovering such vulnerabilities and releasing patches to fix them, Google enables you to shore up your smartphone before attackers can exploit them. Assuming, that is, you apply those updates as soon as they are released. And there, dear reader, lies the rub: many users wait until an automatic update arrives, even though, as Google readily admits, this can take days or weeks. Days or weeks that leave an opportunity for hackers to attack. That's why it's imperative to kickstart any update as soon as it has been confirmed, using the usual methods for the desktop, or by downloading the latest app for Android. And it is the latter that needs your attention now, today. Google has confirmed in a May 28 posting that Chrome for Android 37.0.7151.61 will become available on Google Play in the coming days. Go and check now, and update if it's there. This release includes fixes for eight listed Common Vulnerabilities and Exposures, that's eight security issues that could impact your safety if not addressed. The CVEs are as follows: High Medium Low So, you know what to do: check that your Chrome for Android app is up to date and check it now.