At the heart of the issue is simple — older Android software is no longer supported. Phones running Android 12 or earlier don’t get the latest security patches from Google, leaving them open to new malware and spyware threats that are actively being deployed by attackers.

Because Android is used by hundreds of manufacturers globally — from Samsung and Xiaomi to Oppo and Realme — many devices stop receiving updates just a few years after launch. This has contributed to a huge portion of the global installed base becoming effectively “unsupported,” which Google says means those phones can’t defend themselves against emerging threats.

Security analysts estimate that this vulnerability now affects over a billion Android users worldwide, making it one of the most widespread mobile security risks in recent memory.

Google’s blunt message to users is clear:

• Check your Android version and install every update available.
• If your phone can’t receive the newest updates, consider upgrading to a newer model that still gets regular security patches. (The Economic Times)

Without taking these steps, your device could be more exposed to malware, spyware, and other attacks that aim to steal personal data, financial information, or compromise your phone’s security altogether.

In short, while Android powers the majority of the world’s smartphones, its fragmented update ecosystem has created a situation where millions of devices are now insecure — and Google wants users to take that risk seriously before it’s too late.