Android 17 Advanced Protection (Google): AccessibilityService locked to verified Accessibility Tools — blocks major malware path
Google Android security blog (amplified by The Hacker News 2 October 2026) states that in Android 17, enabling Advanced Protection automatically restricts AccessibilityService access exclusively to verified applications categorised as Accessibility Tools — closing a primary conduit used by banking trojans and spyware for screen reading, overlay fraud, silent permission grants and blocking uninstall, while preserving legitimate assistive tech. Advanced Protection also disables WebGPU in that mode to shrink browser attack surface. Google frames AccessibilityService abuse as a leading fraud/scam vector because the API can interact with the UI without root. Not a CVE; platform hardening for users who opt into Advanced Protection on Android 17. Primary: Google security blog; wire: THN 2 Oct.
- Product
- Android 17 — Advanced Protection / AccessibilityService
- Versions
- Android 17 with Advanced Protection enabled (AccessibilityService restricted to verified Accessibility Tools; WebGPU disabled in that mode)
- Exploited in Australia?
- unknown
- Patch to
- On Android 17 devices, enable Advanced Protection where appropriate; keep Play Protect / OS updates current. Enterprise: prefer managed Google Play / verified accessibility apps for assistive needs.
Primary: Google — Android Advanced Protection updates (Accessibility Tools lock / WebGPU; Android 17) · Vendor: Google Android security blog — Advanced Protection · The Hacker News — Android 17 Advanced Protection locks accessibility to verified tools (2 Oct 2026)