HighMalware
Google Adds 6 Advanced Protection Features to Android 17 Against Sophisticated Attacks
Cyber Security News·Source published ·1 min read
What happened?
Google has detailed six Advanced Protection enhancements for Android 17, targeting sophisticated attacks, scams and unauthorized access. Announced on October 1, 2026, the changes combine stronger restrictions with tools that preserve evidence when someone suspects their phone has been compromised. The update expands protections introduced with Android 16 rather than announcing a newly discovered malware campaign. Building on Android 16 security protections, the approach brings security controls together for journalists, elected officials, public figures and other users facing elevated risks.
Key details
- Google announced six Advanced Protection enhancements for Android 17 on October 1, 2026, targeting sophisticated attacks and unauthorized access.
- The features build on Android 16 protections and are aimed at journalists, officials, and other high-risk users.
- Intrusion Logging stores encrypted security events in cloud storage for 12 months but requires manual opt-in to start recording.
- Accessibility Protection restricts AccessibilityService access to verified Accessibility Tools apps when Advanced Protection is enabled.
- Disabling WebGPU in Chrome reduces the browser's attack surface from sophisticated web graphics exploits.
- Failed Authentication Lock completely locks down the device after repeated authentication failures but is restricted to selected Android 17 devices.
Affected
- Android 17 devices generally receive four of the six features.
- USB Protection and Failed Authentication Lock are limited to selected Android 17 devices and Pixel 6 or newer.
Fixes and mitigations
- Manually enable Intrusion Logging in Advanced Protection settings to start forensic evidence recording.
- Advanced Protection prevents foundational protections like Google Play Protect and Scam Detection from being disabled.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.
