Nearly one billion Android users exposed as older versions lose security support

With nearly 40 percent of active Android phones running outdated versions that no longer receive security patches, Google warns users of rising exposure to malware, spyware, phishing attacks, and data theft worldwide.

Google has issued a fresh security warning, revealing that more than one billion Android smartphones globally may be exposed to cyber threats due to outdated software. The company’s latest platform distribution data shows that a significant share of active devices continues to operate on Android 12 or older versions that no longer receive routine security updates.

Without regular patches, newly discovered vulnerabilities in these systems remain unresolved, creating opportunities for hackers to exploit weaknesses. Android, being the world’s most widely used mobile operating system, amplifies the scale of the concern. While devices running Android 13, 14, and newer versions continue to get periodic security fixes, millions of older phones have effectively reached the end of their support cycle.

Fragmentation adds to the risk

Industry experts point to Android’s fragmented ecosystem as a key factor behind the issue. Unlike Apple, which manages both hardware and software updates for iPhones, Android updates are largely dependent on device manufacturers. Many entry-level and mid-range smartphones typically receive software support for only two to three years after launch. Once support ends, users must either upgrade or continue using devices that may no longer be secure.

Google noted that built-in safeguards such as Google Play Protect offer a layer of defense but cannot fully compensate for the absence of core operating system updates. Unsupported devices are particularly susceptible to phishing scams, ransomware, banking fraud, and spyware attacks. In severe cases, attackers may gain access to passwords, private messages, and sensitive personal data.

Steps users can take

The company advises users to check their Android version and security patch level through the Settings menu. If a device remains on Android 12 or earlier without further updates available, upgrading to a newer model is strongly recommended.

Security specialists also suggest avoiding unverified app downloads, enabling Play Protect, using strong passwords, and installing available updates promptly. However, they emphasize that these precautions cannot replace official system-level security patches.

As cyber threats grow increasingly sophisticated, Google’s warning underscores a widening security gap between users of newer smartphones and those relying on aging devices.