Android Adds Intrusion Logging for Sophisticated Spyware Forensics

Google announced Intrusion Logging, an opt-in feature in Android's Advanced Protection Mode that collects end-to-end encrypted forensic logs of device and network activity (apps, installs, network connections, USB file transfers, certificate changes, lock/unlock events, etc.) stored for 12 months and protected by account and screen-lock credentials; users can download logs for third-party analysis. The announcement also lists many other privacy and security enhancements coming to Android, including verified financial calls, Live Threat Detection expansion, accessibility API restrictions, Binary Transparency, post-quantum cryptography, anti-scam and device-recovery improvements, and AI/data isolation measures.