Google halts security updates, leaving over a billion android phones exposed

More than one billion Android smartphones across the globe are now facing elevated cybersecurity threats after Google confirmed that devices running Android 12 or earlier will no longer receive security updates. The figures are based on Android platform distribution data referenced by Moneycontrol.

According to the data, around 42.1% of active  devices are now exposed to potential malware and spyware attacks. Only 57.9% of smartphones currently operate on Android 13 or later, leaving the remaining devices without system-level security protection.

Phones released in 2021 or earlier have been hit the hardest, and the situation has shown minimal progress over the past year. As a result, nearly one billion Android users continue to rely on unsupported software versions, effectively leaving their devices stuck without critical security safeguards.

Although Google develops the operating system, it does not control update policies for most manufacturers beyond its Pixel devices. Brands including Samsung, Xiaomi, Oppo, Vivo and Motorola oversee their own update schedules and often discontinue software support after a limited period.

This situation contrasts sharply with Apple’s vertically integrated ecosystem, which enables the company to deliver operating system and security updates to older iPhone models in a far more uniform and consistent manner.

The figures underline the slow adoption of newer Android versions. Just 7.5% of Android devices currently run Android 16, while 19.3% are on Android 15, 17.2% use Android 14 and 13.9% remain on Android 13. Overall, only slightly more than half of the Android ecosystem is still eligible for regular security updates.

In contrast, a significant share of Android devices now operate on versions that no longer receive security patches. Android 12 accounts for 11.4% of devices, Android 11 for 13.7%, Android 10 for 7.8%, Android 9 for 4.5% and Android 8 for 2.3%. Taken together, more than 40% of Android smartphones are now outside Google’s official security support.

Cybersecurity specialists caution that the threat is real. Malware infections can result in stolen login credentials, unauthorised access to banking and investment apps, interception of messages and authentication codes, and direct financial losses.