September Pixel Drop Goes Stable, Galaxy S26 FE Gets Patched, and a Nasty New Malware Strain Emerges
Android’s news cycle this week is dominated by one big platform release: Google’s September Pixel Drop has moved from beta to stable, bringing Android 17 QPR1 to more than 20 Pixel models along with a batch of new features. Elsewhere, Samsung is pushing security patches to its budget-friendly Galaxy S26 FE, Xiaomi is widening its HyperOS 4 beta program, and security researchers are sounding the alarm on a new strain of Android malware spreading through social ad networks. Here’s what’s happening across the Android ecosystem today.
Android 17 QPR1 Goes Stable Across the Pixel Lineup
Google has officially shipped the stable build of Android 17 QPR1 as the centerpiece of its September Pixel Drop, rolling it out to 21 Pixel devices spanning the Pixel 6 through Pixel 10 series. Beyond new features, the update carries a substantial list of stability and reliability fixes, including resolutions for Wi-Fi and Bluetooth freezes that had been affecting Pixel 10 devices, along with fixes for app-install crashes, thermal throttling under heavy use, and intermittent telephony connectivity drops. For Pixel owners who held off on the beta, this is the safe, stable version to install.
Pixel Drop Adds Redesigned VIPs Widget, Wellbeing Tools, and Watch Gesture Upgrades
Alongside the OS update, the September Pixel Drop packs in a handful of user-facing changes. A redesigned Pixel VIPs widget now allows one-tap calling or texting for favorite contacts directly from the home screen, while the Pause Point digital wellbeing feature is expanding to Pixel 6 and newer devices. Gboard’s scam-detection warnings are rolling out to nine additional countries, and Pixel Watch 3 and 4 owners get one-handed pinch-to-scroll gestures for notifications plus an improved raise-to-talk trigger for Gemini on Watch 4. Google also added three Harry Potter-themed Pixel Themes for anyone looking to customize their home screen.
Source: 9to5Google, with corroborating coverage from Android Authority and Google’s official blog
Google Play System Update Follows the Pixel Drop
On the heels of the Android 17 QPR1 rollout, Google has also begun pushing the routine September Google Play system update to Pixel devices. Unlike a full OS update, this delivers behind-the-scenes platform and security changes without requiring a version bump, and it typically rolls out independently of carrier or OEM update schedules. Pixel owners can check whether it’s arrived by heading to Settings > System > Software updates > Google Play system update.
Source: Droid-Life
Samsung Galaxy S26 FE Picks Up September Security Patch
Samsung has started rolling out firmware S741NKSS2AZI3 to the Galaxy S26 FE, bringing the September 2026 security patch and closing out 90 security issues that were present in the prior build. The rollout began in South Korea, with a wider regional expansion expected over the following days. Samsung is treating this as a maintenance-only release, so FE owners shouldn’t expect new features — just a more secure device.
Source: SammyFans
Xiaomi Expands HyperOS 4 Global Beta With Second Device Wave
Xiaomi’s global HyperOS 4 beta program is widening its reach, introducing a new “Soft Light Glass” translucent design language, stacked widgets, grouped notifications, and a redesigned device hub. The first beta wave covered the Xiaomi 17, Xiaomi 17 Ultra, and Leica Leitzphone; a second wave extending eligibility to the Xiaomi 17T Pro, Xiaomi 17T, Xiaomi 15 Ultra, and Xiaomi 15 is landing today. Interested owners of eligible devices can sign up through the Xiaomi community beta channels.
Source: Android Authority
New “StreamRat” Malware Combines Data Theft With Ransomware Tactics
Security researchers at Malwarebytes have flagged a new Android malware strain called StreamRat, which is spreading through advertising campaigns on Meta and TikTok. What makes it notable is its combined approach: it steals personal and financial data from infected devices while also encrypting files ransomware-style and harassing victims to pressure payment. The malware appears to be distributed through malicious app downloads promoted in social ad networks rather than the Play Store itself, underscoring the risk of sideloading apps from ad links. Security firms are urging users to avoid installing apps from anything other than trusted, verified sources.
Source: Malwarebytes, with additional coverage from BleepingComputer and TechRadar
Wrapping Up
Today’s biggest story is clearly Google’s stable Android 17 QPR1 rollout, which brings both meaningful new features and a long list of bug fixes to more than 20 Pixel models — a strong incentive for anyone still sitting on the beta channel to update now. Samsung and Xiaomi owners have their own reasons to check for updates this week, whether that’s a security patch on the Galaxy S26 FE or an expanding HyperOS 4 beta. And with StreamRat making the rounds through social media ads, it’s a good reminder to stick to the Play Store and avoid installing apps from unfamiliar links. As always, check your device’s software update settings to see what’s rolled out to you specifically.