Google is changing Android security with a new risk-based approach to security patches that will prioritize the most serious vulnerabilities.

Google has restructured Android's decade-old monthly security update process into a "Risk-Based Update System" that separates high-priority patches from routine fixes. Monthly bulletins now contain only vulnerabilities under active exploitation or in known exploit chains -- explaining July 2025's un...