Loading story…
Several Android device vendors announced or began rolling out routine software updates, security patches, and end-of-support changes across consumer smartphones. Honor pushed a MagicOS 10 update for the Honor 200 Pro with the March 2026 security patch, while Nothing issued the first Nothing OS 4.1 update for the Phone (4a), combining the March 2026 Android patch with camera, UI, and AI-related feature additions. Motorola also started distributing Android 16 to the Edge 50 Neo, extending a broader pattern of platform and security maintenance across current devices.
Other reports focused on software support lifecycle planning rather than a single security incident. Xiaomi ended software support for the Xiaomi 12 series and Redmi Note 12 5G, meaning those devices will no longer receive HyperOS updates or security patches, and OnePlus coverage outlined an unofficial list of devices unlikely to receive OxygenOS 17 / Android 17 based on existing update policies. The material is not fluff because it contains concrete product support and patch-status information, but it does not describe one discrete cybersecurity event, breach, or vulnerability disclosure; it is a collection of routine mobile OS update and end-of-life news items.
Map this exposure pattern across your cloud, code, and identities.
10 events from the most recent confirmed update back to the earliest known activity.
Huawei began batch rollout of its June 2026 EMUI security update to the Pura 70 series, Pura 80 series, and Mate X7. The release integrates June 2026 security patches to improve system security and overall stability, with different build numbers and package sizes by device.
Reporting said Samsung's upcoming One UI 8.5 update would introduce stronger security controls for Galaxy devices, including theft protection, failed-authentication safeguards, app blocking, and inactivity restarts. The rollout was expected to begin in Korea and expand globally around 2026-05-04 as a free update for supported phones.
Honor began rolling out the MagicOS 10.0.0.150 update to Magic 7 series phones as its April 2026 release. The update adds new YOYO AI capabilities, expands Honor Connect cross-device features, improves stability and power optimization, and includes the March 2026 Android security patch.
Xiaomi publicly responded to discussion about discontinued MIUI updates by stating that MIUI has completed its transition to HyperOS after about 12 years. The company said it will gradually stop MIUI maintenance and major upgrades, but devices still running MIUI will continue receiving necessary security patch updates.
Huawei began a phased rollout of its March 2026 EMUI update for the Mate X7 and Pura 70 series. The release includes the March 2026 security patch and fixes for privacy-related bugs that could lead to data leaks or abnormal device behavior, with Pura 70 series on EMUI 14.2.0.236 and Mate X7 on version 15.0.0.137.
Xiaomi resumed the global HyperOS 3 rollout for the Xiaomi 13T Pro after previously pulling the update over random reboot and bootloop issues. It also began rolling out a stable HyperOS 3 update for the Poco F5 globally, with both updates carrying the February 2026 security patch while the Poco F5 remains on Android 15.
Honor started rolling out MagicOS 10.0.0.126 to global Honor 200 Pro users. The 158MB update includes the March 2026 security patch and security-focused improvements aimed at addressing privacy-related exploits.
Xiaomi officially ended software support for the Xiaomi 12, Xiaomi 12 Pro, Xiaomi 12 Lite, and Redmi Note 12 5G by adding them to its end-of-life list. These devices will no longer receive HyperOS updates, security patches, or feature updates.
Users in several European countries, including Italy, Poland, Spain, and Romania, reportedly began receiving the stable Android 16 update for the Motorola Edge 50 Neo. The rollout follows more than two months of beta testing and arrives as firmware version W1UI36H.39-17.
Nothing began rolling out the first post-launch update for the Phone (4a), a 257MB Nothing OS 4.1 build (B4.1-260309-1830). The release adds the March 2026 Android security patch, camera improvements, new widget and lock screen features, Glyph and AI enhancements, and various stability and network fixes.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
12 references tracked. Mallory keeps watching after this page renders.
huaweicentral.com
Open sourcetechrepublic.com
Open sourcehuaweicentral.com
Open sourcehuaweicentral.com
Open sourcegizmochina.com
Open sourcegizmochina.com
Open sourcegizmochina.com
Open sourcegizmochina.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google’s March Android security update addressed **129 vulnerabilities**, including one **actively exploited** high-severity memory-corruption flaw in an open-source **Qualcomm display component** tracked as **CVE-2026-21385**. Google warned the issue “may be under limited, targeted exploitation,” and reporting indicated Qualcomm marked the vulnerability as exploited; Qualcomm stated it provided fixes to customers in **January 2026** and urged end users to apply OEM-delivered device updates as they become available. Separately, the Canadian Centre for Cyber Security issued multiple vendor rollups and advisories on March 2, 2026, including an **Android monthly rollup (AV26-187)** pointing organizations to the Android Security Bulletin for patching guidance. Additional Canadian advisories covered unrelated vulnerability sets in **Veeam Kasten for Kubernetes (AV26-188)**, **VMware Tanzu products (AV26-186)**, **Red Hat (including Linux kernel updates) (AV26-184)**, **CISA ICS advisories for multiple OT/IoT products (AV26-183)**, **Dell infrastructure products (AV26-181)**, and **IBM enterprise software (AV26-180)**; these are general patch-notification items and do not provide details tied to the Android/Qualcomm zero-day beyond directing readers to apply vendor updates.
Jun 29, 2026
Google has released **Android 17**, publishing the source code to AOSP under the tag `android-17.0.0_r1` and beginning rollout to supported Pixel devices, with broader availability planned across OEMs including HONOR, Lenovo, OnePlus, OPPO, vivo, Xiaomi, and others. Google also made **Generic System Images** available for `ARM64` and `x86_64`, while the platform adds major usability and device features such as foldable enhancements, App Bubbles, Handoff support, VVC/H.266 video, RAW14, HE-AAC, BLE hearing-aid improvements, and OpenJDK 25 integration. The release introduces a broad set of security and privacy changes, including tighter controls for **contacts**, **location**, and **local network** access, expanded one-time-password handling beyond SMS, stricter restrictions on **dynamic code loading**, stronger lost-device protections, improved threat detection, enhanced **Advanced Protection**, and stricter PIN retry limits. Google also added Certificate Transparency-related enhancements, support for **HPKE** cryptography and **ML-DSA** APK signatures, and continued restrictions on cleartext traffic, alongside Pixel-specific updates delivered through the June Pixel Drop.
Jul 12, 2026
Google’s September 2026 Android Security Bulletin fixes more than 90 vulnerabilities affecting Android 14, 15, 16, 16 QPR2, and 17. The release rates 26 flaws as **critical** and 68 as high severity, including Android System remote-code-execution vulnerabilities that can be triggered without user interaction or additional execution privileges, depending on the affected CVE. It also addresses critical elevation-of-privilege and denial-of-service issues in the Framework and System, a critical Transparent Inter-Process Communication kernel-component RCE flaw, and defects in kernel, Android TV, and vendor components. Google is distributing patch levels `2026-09-01` and `2026-09-05`; devices at the latter level receive all applicable September fixes, including relevant kernel and vendor patches. Pixel and Samsung Galaxy devices are among the first receiving updates, while availability for other manufacturers may lag. Qualcomm separately released fixes for 14 high-severity vulnerabilities in software used by its mobile, wireless-connectivity, automotive, and computing platforms, which could expose confidential information or disrupt affected services. No active exploitation was reported at publication, but organizations should prioritize deployment of available Android and vendor updates.
Sep 9, 2026