Google has added six features to Advanced Protection in Android 17. One of them targets a familiar problem in spyware investigations: the evidence often disappears from the phone once the attacker cleans up.

The question matters most to people such as journalists, who may suspect their device has been compromised and then find nothing left to examine. The new release addresses this by keeping a copy of security records away from the handset itself. People already using Advanced Protection will get a notification when the new capabilities reach their devices.

Logs that survive a cleanup

The headline feature is Intrusion Logging. It records security and network events on the device, including app activity. If a user suspects a compromise, they can download the logs, decrypt them and hand them to trusted security experts for analysis.

Read More

Google has unveiled Gemini 4 Argon, a new frontier AI model that the company says can find, validate and fix critical software vulnerabilities without human involvement. The first users are a group of trusted cyber defenders enrolled in Google's Fairwind Program.

Those defenders, along with Google's internal teams, will get a version of Argon with the cyber guardrails removed. Wider access comes later. Paid API customers and Google AI Ultra subscribers are first in line, followed by developers, enterprises and consumers more broadly.

Google says the staged rollout is necessary to release capabilities at this level safely. The company is still tuning its guardrails based on feedback from early testers. It is also participating in the U.S. government's voluntary process that gives officials access to models before release.

Read More