惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

M
MIT News - Artificial intelligence
罗磊的独立博客
Hugging Face - Blog
Hugging Face - Blog
Apple Machine Learning Research
Apple Machine Learning Research
Last Week in AI
Last Week in AI
S
SegmentFault 最新的问题
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
美团技术团队
人人都是产品经理
人人都是产品经理
WordPress大学
WordPress大学
The Cloudflare Blog
IT之家
IT之家
雷峰网
雷峰网
小众软件
小众软件
博客园 - 叶小钗
博客园 - 聂微东
爱范儿
爱范儿
博客园 - 司徒正美
博客园 - 三生石上(FineUI控件)
V
Visual Studio Blog
博客园 - 【当耐特】
V
V2EX
博客园_首页
T
Tailwind CSS Blog

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns
Android 17 Beta Introduces Secure-By-Default Architecture
2026-02-17 · via www.infosecurity-magazine.com

A new beta version of Android 17 has been released, bringing a range of privacy, security and performance changes aimed at strengthening app protections and improving developer workflows.

The update marks the first public beta of the mobile operating system and introduces structural changes that will affect how developers build and test apps ahead of its final release.

The release signals a shift toward tighter default security settings, alongside a move away from the traditional Developer Preview model. Android is replacing this with a continuous Canary channel designed to provide earlier access to features and streamline testing.

Privacy and Security Enhancements

Android 17 introduces two major security updates. The android:usesCleartextTraffic attribute has been deprecated, and apps targeting API level 37 that enable cleartext traffic without a corresponding network security configuration will have such traffic blocked by default.

Developers are being urged to migrate to network security configuration files for more granular control.

Support for HPKE hybrid cryptography has also been added via a new public Service Provider Interface (SPI), enabling secure communication that combines public-key and symmetric encryption.

Additionally, certificate transparency is now enabled by default, and new install-time permissions aim to improve protections around localhost interactions.

Read more on Android security updates: Google Releases Patches for Android Zero-Day Flaws Exploited in the Wild

Performance and Large-Screen Changes

Beyond security and privacy improvements, apps targeting Android 17 will now need to adapt to new requirements on large-screen devices. Orientation and resizability restrictions are being phased out for screens with a smallest width of 600dp or more, meaning certain manifest attributes and APIs will be ignored.

The update also introduces a lock-free MessageQueue implementation and generational garbage collection in ART, both intended to reduce CPU overhead and improve frame consistency.

Google said platform stability is targeted for March, when the final SDK and NDK APIs will be delivered. Developers will then have several months to test before the final release.

Android 17 will continue to receive quarterly updates, with planned app-breaking changes expected in Q2 and a minor SDK release scheduled for Q4. The new Canary channel will provide faster feature access, over-the-air (OTA) updates and improved integration with continuous integration workflows.

Image credit: Alex Photo Stock / Shutterstock.com