Get the latest tech news
Google Shifts Android Security Updates To Risk-Based Triage System
Google has restructured Android's decade-old monthly security update process into a "Risk-Based Update System" that separates high-priority patches from routine fixes. Monthly bulletins now contain only vulnerabilities under active exploitation or in known exploit chains -- explaining July 2025's un...
Google has restructured Android's decade-old monthly security update process into a "Risk-Based Update System" that separates high-priority patches from routine fixes. Monthly bulletins now contain only vulnerabilities under active exploitation or in known exploit chains -- explaining July 2025's unprecedented zero-CVE bulletin -- while most patches accumulate for quarterly releases.The September 2025 bulletin contained 119 vulnerabilities compared to zero in July and six in August. The company no longer releases monthly security update source code, limiting custom ROM development to quarterly cycles.
Or read this on Slashdot
