I went hands-on with the Xiaomi 18 Pro phones, and they bring two very cool display features I wish were on every Android phone

androidcentral.com Sep 25, 2026

I went hands-on with the Xiaomi 18 Pro phones, and they bring two very cool display features I wish were on every Android phone

Curated by Shubham · TechCapsules · Sep 25, 2026

AI-summarised brief · reviewed before publication

Derrek, Android Central’s managing editor, spent a day testing Xiaomi’s newly released 18 Pro smartphones. He noted that both devices ship with a 6.7‑inch AMOLED panel that supports a 120 Hz adaptive refresh rate and includes an under‑display camera that remains hidden until activated. The phones also feature a dual‑layer glass construction that reduces glare and improves outdoor visibility, while the software adds a dynamic color‑calibration mode that adjusts hue based on ambient lighting. Battery life held up during a mixed‑usage marathon, and the devices ran the latest Android 14 build with Xiaomi’s MIUI 15 skin. Derrek praised the seamless integration of the display innovations, calling them “the kind of upgrades that should become standard on Android flagships.” for everyday users.

💡 Why It Matters

· Offering an under‑display camera and adaptive high‑refresh panel at a competitive price forces rivals to raise the baseline for Android flagship displays.

Read full article on androidcentral.com

Motorola just gave privacy fans a big reason to consider the Signature…

Motorola unveiled its Signature 27 as one of the first smartphones to run Qualcomm’s new Snapdragon 8 Elite Extreme Gen 6, a 2 nm chip capable of 5 GHz speeds. The device features a redesigned camera layout, Audio by B&O, and a new build that departs from previous Signature models. Crucially, GrapheneOS has confirmed initial support for the phone, marking the first non‑Pixel device to receive the privacy‑focused OS. Motorola has not yet announced a release date or price.

💡 By opening GrapheneOS to a mainstream flagship, Motorola expands privacy‑oriented Android options beyond the Pixel line, potentially reshaping how consumers balance performance and security.

9to5google.com · Sep 25

Android’s Create My Widget ‘app’ detailed on phones, Googlebooks

Google announced that its new “Create My Widget” app will launch on September 24, initially on Googlebooks, with a Play Store listing previewing its phone interface. The guided experience offers categories such as Weather, Sports & fitness, Events & travel, Daily habits, Important dates, Finance, and Tools & tips, each containing template widgets. Users can also describe a custom widget via a prompt box. The app, version 1.27.983746769.0‑desktop_release, uses Material 3 Expressive shapes for simple, low‑information designs, and is available under the package name com.google.android.apps.yourwidget.

💡 The app’s template‑driven approach lowers the barrier for non‑developers to create personalized widgets, potentially reshaping how users interact with their home screens and encouraging broader adoption of dynamic content.

infosecurity-magazine.com · Sep 25

RemControl Banking Trojan Gives Attackers Remote Control of Android Devices

Group‑IB researchers have identified a new Android banking trojan, dubbed RemControl, that exploits Accessibility Services to seize full control of victims’ devices and harvest banking credentials such as PINs, mobile‑banking codes and card expiry dates. First seen in July 2026, the malware has targeted retail‑banking customers in Western Europe, the Middle East and Canada, compromising more than 30 banks across six countries. Distributed via counterfeit Google Play pages masquerading as the TVTap IPTV app, the dropper bypasses Google Play Protect by routing traffic through a null VPN and signing the payload with a freshly generated keystore key. The trojan’s developer, tracked as UNKK, used an AI assistant to generate much of the command‑and‑control infrastructure, mistakenly framing the API as a parental‑monitoring tool. The exposed C2 API documentation allowed researchers to map the full fraud platform, which supports multiple languages and may expand further.

💡 By hijacking Accessibility Services, RemControl can silently execute transactions, turning ordinary smartphones into covert banking fraud machines. Its AI‑crafted backend shows how threat actors can accelerate weaponisation, raising the bar for mobile security defenses.

9to5google.com · Sep 25

Google rolling out blood pressure & insulin resistance, more on Pixel Watch…

Google has begun rolling out new health metrics for Pixel Watch 3, 4, and 5, adding blood pressure trends, insulin resistance trends, and sleep breathing quality metrics. The blood pressure feature passively tracks pulse and motion over a month, requiring at least five consecutive days per week, while insulin resistance analysis uses multi‑week physiological data and needs seven days per month. Both trends appear in the Google Health app on the first of each month. Sleep breathing metrics report nightly optimal breathing time and monthly patterns. The features launch free for all three devices in early October.

💡 These additions extend the Pixel Watch’s role from a fitness tracker to a proactive health monitoring platform, offering users continuous, cuff‑free cardiovascular and metabolic insights that could influence early disease detection and management.

9to5google.com · Sep 25

Google rolling out Android 17 QPR2 Beta 6 for Pixel

Google has released Android 17 QPR2 Beta 6 for a wide range of Pixel devices, including the Pixel 6a, Pixel 7 series, Pixel 8 and 9 models, and the Pixel Tablet, Fold, and 10 series. The update arrives just a week after Beta 5 and can be installed via the Android Beta Program or downloaded as system images for the emulator. Users can report bugs through the Android Beta Feedback app or the Android Beta community on Reddit. Pixel 11 devices remain unsupported.

💡 The rapid rollout of Beta 6 demonstrates Google’s commitment to refining the Android experience ahead of the official 17 release, giving developers early access to new features and security patches.

thehackernews.com · Sep 25

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution…

A new Android banking trojan, RemControl, has been uncovered targeting retail banking customers in Western Europe, the Middle East and Canada. Distributed via counterfeit Google Play pages masquerading as the TVTap IPTV app and promoted through Meta ads, the malware exploits Android’s Accessibility Service to overlay phishing screens on legitimate banking apps, stream screens, log keystrokes and grant operators full remote control. Command‑and‑control addresses are resolved through an encrypted Telegram dead‑drop, and AI‑assisted code appears in the phishing overlays, with Russian‑language comments suggesting a Russian actor possibly linked to the Medusa UNKN affiliate botnet. Meanwhile, Chinese AI firm Z.ai disabled a ZCode feature after it was found automatically uploading users’ local code repositories to Alibaba Cloud, echoing earlier incidents with SpaceXAI’s Grok Build. The FBI and CISA issued a joint fact sheet urging critical‑infrastructure owners to enforce least‑privilege access for third‑party industrial‑control‑system integrators. Finally, researchers exposed Russian super‑app MAX’s ability to silently capture screenshots, read and write all mini‑app storage, and inject JavaScript, effectively acting as a man‑in‑the‑middle for user interactions.

💡 The convergence of AI‑enhanced malware and insecure default settings in popular developer tools demonstrates a widening attack surface that can compromise both personal finances and corporate codebases, forcing immediate reassessment of security controls.