Google rolls out Android Intrusion Logging in Android Advanced Protection Mode
Security Tool/Service
Summary
Hide ▲
Show ▼
Google has released Android Intrusion Logging for Android Advanced Protection Mode, giving high-risk Android users encrypted forensic logs to investigate suspected spyware and suspicious device activity. The feature matters because it preserves device and network evidence that can be shared later for forensic analysis instead of relying on short-lived incidental logs. Google also broadened AAPM with additional hardening controls such as USB Protection and restricted accessibility services.
Related Happenings
Android Intrusion Logging forensic logging rollout for spyware investigations
Security Tool/Service
First: 13.05.2026 09:55
Last: 13.05.2026 09:55
Sources 1
About this happening:
**Android** is adding **Intrusion Logging**, an opt-in forensic feature in **Advanced Protection Mode** that preserves device and network activity for suspected spyware compromise...
Android Intrusion Logging forensic logging rollout for spyware investigations
Security Tool/ServiceAbout this happening: **Android** is adding **Intrusion Logging**, an opt-in forensic feature in **Advanced Protection Mode** that preserves device and network activity for suspected spyware compromise...
Android 17 expands platform security and privacy protections
Security Tool/Service
First: 12.05.2026 20:00
Last: 12.05.2026 20:00
Sources 1
About this happening:
**Android 17** will add a broad set of **Google**-backed security and privacy controls next month, reducing exposure to **banking scam calls**, **device theft**, and **OTP theft**...
Android 17 expands platform security and privacy protections
Security Tool/ServiceAbout this happening: **Android 17** will add a broad set of **Google**-backed security and privacy controls next month, reducing exposure to **banking scam calls**, **device theft**, and **OTP theft**...
Apple and Google Messages beta rollout of cross-platform E2EE RCS
Security Tool/Service
First: 12.05.2026 16:00
Last: 12.05.2026 16:00
Sources 1
About this happening:
Apple and Google have begun a **beta rollout** of **end-to-end encrypted RCS** between **iPhone** and **Android** devices, materially reducing carrier and in-transit visibility fo...
Apple and Google Messages beta rollout of cross-platform E2EE RCS
Security Tool/ServiceAbout this happening: Apple and Google have begun a **beta rollout** of **end-to-end encrypted RCS** between **iPhone** and **Android** devices, materially reducing carrier and in-transit visibility fo...
PromptSpy backdoor for Android with Gemini API automation
Malware Activity
First: 11.05.2026 16:02
Last: 11.05.2026 16:02
Sources 1
About this happening:
The **PromptSpy** backdoor for **Android** was highlighted for using **Gemini APIs** to automate device interaction, increasing the risk of unauthorized control on infected phones...
PromptSpy backdoor for Android with Gemini API automation
Malware ActivityAbout this happening: The **PromptSpy** backdoor for **Android** was highlighted for using **Gemini APIs** to automate device interaction, increasing the risk of unauthorized control on infected phones...
Google expands Binary Transparency for Android for production app verification
Security Tool/Service
First: 06.05.2026 12:13
Last: 06.05.2026 12:13
Sources 1
About this happening:
Google expanded **Binary Transparency for Android**, adding a public verification system that helps detect unauthorized or modified Google app binaries. The rollout covers product...
Google expands Binary Transparency for Android for production app verification
Security Tool/ServiceAbout this happening: Google expanded **Binary Transparency for Android**, adding a public verification system that helps detect unauthorized or modified Google app binaries. The rollout covers product...
Timeline
-
14.05.2026 16:30 2 articles · 13d ago
Google rolls out Android Intrusion Logging in Android Advanced Protection Mode
Mitigation Patch UpdateGoogle rolls out Android Intrusion Logging inside Android Advanced Protection Mode for high-risk Android users, letting them collect encrypted daily logs of security events, spyware installation and removal, and DNS and connection events for later secure sharing with trusted forensic analysts; the same AAPM update also adds USB Protection, restricted accessibility services starting with Android 17, disabled device-to-device unlocking, Chrome WebGPU support removal, and chat notification scam detection.
Show sources
- Google Launches Android Spyware Forensics Tool for High-Risk Users — www.infosecurity-magazine.com — 14.05.2026 16:30
- Google Launches Android Spyware Forensics Tool for High-Risk Users — www.infosecurity-magazine.com — 14.05.2026 16:30