Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

Android 15 Rolling Out With New Theft, Application Protection Features

Google has released Android 15 with new security features to keep devices and sensitive applications better protected.

Android security updates

Google on Tuesday started shipping Android 15 to Pixel devices with a hefty set of security improvements, including theft protection and a private space for sensitive applications.

Android 15’s enhanced security features, such as the new Theft Detection Lock, rely on AI to keep both the device and the user’s data safe.

“By using on-device machine learning, Theft Detection Lock is able to analyze various device signals to detect potential theft attempts. If the algorithm detects a potential theft attempt on your unlocked device, it locks your screen to keep thieves out,” Google explains.

The new capability works together with Offline Device Lock, which locks the device when detecting that it has been offline for a long period of time, to prevent data exfiltration. Lost or stolen Android devices can be locked using Remote Lock, which can be used by supplying a verified phone number.

“You can use any device to visit Android.com/lock and lock your phone with just a verified phone number. Remote Lock secures your device while you regain access through Android’s Find My Device – which lets you secure, locate, or remotely wipe your device. As a security best practice, we always recommend backing up your device on a continuous basis, so remotely wiping your device is not an issue,” Google notes.

To deter theft before it happens, Android 15 now requires authentication to change sensitive settings, locks devices after multiple failed login attempts, and comes with enhanced factory reset protections to prevent device resets without Google account credentials.

Advertisement. Scroll to continue reading.

Additionally, Google is working on Identity Check, an upcoming opt-in feature that will require biometric authentication to access critical Google account and device settings, to prevent unauthorized access even if the PIN has been compromised.

On devices running Android 15, users can also keep their sensitive applications, such as social, dating, and banking apps, in a separate private space that, when locked, makes the applications virtually invisible, hiding them from the apps list, recent apps view, notifications and settings.

“To access private space, there’s an additional layer of authentication to keep apps secure and away from prying eyes. And for additional privacy, you can choose to hide the existence of private space from view on your phone,” Google says.

Additionally, Google announced that users can now log in with a simple tap to applications that rely on passkeys for authentication.

Android 15 also brings improved fraud and scams protections, hides one-time passwords from notifications, requires additional permissions when sideloading applications, tightens screen sharing controls, and alerts at risk-users if a cellular base station or surveillance tool is recording their location.

On Tuesday, Google also announced the release of patches for 29 vulnerabilities affecting Pixel devices. The security update is rolling out as a 2024-10-05 patch level and includes fixes for the security defects described in the October 2024 Android security bulletin.

Related: Google Hardens Pixel’s Baseband Security Mitigations

Related: Google Now Syncing Passkeys Across Desktop, Android Devices

Related: Android’s Security Key Now Works with iOS Devices

Related: Unlocking the Power of AI in Cybersecurity

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.

Register

CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!

Register

People on the Move

ServiceNow has appointed Simon Mouyal as Chief Marketing Officer.

James Wilkinson has been named Chief Information Security Officer for the City of Dallas.

PNC Financial Services Group has appointed Christian Winward as CISO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.