And mobile vendors continue to ignore updates
The problem with Googles Android is that we have to wait on phone vendors actually pushing out the updates for the phones. They don't so we remain screwed.
Symantec engineer Dinesh Venkatesan says malware writers have one up on Google with the pillaging of a keystone trick that permits attacks on Android Marshmallow. The method was extracted from white hat proof-of-concept works published initially to show how malware could extract credentials from Android apps. It allows …
Even the name and shame approach can't catch 0-days like these.
This is why I'm sticking to Nexus devices and iOS. At least you get the security patches hot of the press and not after a phone maker tweaks them.
The mobile networks even get inexplicably in the middle of it in some cases. I remember having to wait a long time for updates on 3 Ireland HTC phones. It doesn't even make sense. What exactly do 3 Ireland have customised on those phones? A boot logo and useless bloatware nobody uses?!