Android security has always been an uphill fight. Unlike iOS, there’s no single mandatory App Store, making it easier for a bad link to give rise to a persistent malware problem. At the same time, the operating system is spread across dozens of carriers and device manufacturers, making it hard to push out fixes once a vulnerability is discovered. But after 2015’s Stagefright bug, Google started a new crackdown, hardening subsequent versions of Android and demanding better patching schedules from partners. Now, a year and a half later, those efforts may finally be starting to bear fruit.

Today, Google published a new report on the fight, running down the state of Android security in 2015. Over the course of 71 pages, the report details…

Continue reading…