Feed: Slashdot
Feed Link: https://slashdot.org/
---

Title: Google Shifts Android Security Updates To Risk-Based Triage System

Link: https://tech.slashdot.org/story/25/09/15/1444...

Google has restructured Android's decade-old monthly security update process
into a "Risk-Based Update System" that separates high-priority patches from
routine fixes. Monthly bulletins now contain only vulnerabilities under
active exploitation or in known exploit chains -- explaining July 2025's
unprecedented zero-CVE bulletin -- while most patches accumulate for
quarterly releases. The September 2025 bulletin contained 119 vulnerabilities
compared to zero in July and six in August. The change reduces OEM workload
for monthly updates but extends the private bulletin lead time from 30 days
to several months for quarterly releases. The company no longer releases
monthly security update source code, limiting custom ROM development to
quarterly cycles.

Read more of this story at Slashdot.

---
VRSS v2.1.180528