Google has sounded the alarm over a growing cybersecurity crisis, confirming that more than 40% of Android smartphones worldwide are vulnerable to emerging malware and spyware threats.
The warning comes after Google acknowledged that a significant number of devices are no longer receiving critical security updates
The company’s latest Android distribution data paints a troubling picture of slow software adoption. Android 16 is currently installed on just 7.5% of devices, while Android 15 accounts for 19.3% and Android 14 for 17.9%.
Android 13 the oldest version still eligible for full security patches runs on only 13.9% of phones, leaving the majority of users exposed to potential cyberattacks.
Devices operating on Android 12 or earlier have officially fallen out of Google’s security support cycle. As a result, more than one billion Android smartphones over 40% of the global user base are effectively defenseless against newly discovered threats.
Google has also confirmed that active spyware campaigns are already exploiting these vulnerabilities, intensifying the urgency of the situation.
Although the data was compiled in December, its recent release underscores the immediate nature of the risk. Google emphasized that unsupported devices cannot receive protective updates, even as new malware variants emerge, urging users not to delay action.
To mitigate the threat, Google advises upgrading to Android 13 or newer. If a device is no longer eligible for updates, users are encouraged to replace it.
The company noted that purchasing a newer mid-range smartphone with guaranteed software support is considerably safer than continuing to use an older premium device without protection.
While Apple users are currently being prompted to transition to iOS 26, Google highlighted a more structural challenge within the Android ecosystem, where many devices will never receive future updates.
The company concluded with a stark warning the danger is present today, not tomorrow, and users must upgrade promptly to safeguard their data against malware and spyware.
