Google has released a security update to address two critical zero-day vulnerabilities in the Android operating system that were actively being exploited by hackers. These flaws, identified as CVE-2025-12345 and CVE-2025-12346, allowed malicious actors to gain unauthorized access to sensitive information and control over affected devices. The vulnerabilities were found in the Android system component and could be exploited remotely, making them particularly dangerous. Google has urged all users to update their devices immediately to protect against potential attacks. The update is part of Google's regular monthly security patch, which also includes fixes for other less critical vulnerabilities. Security researchers have praised Google's swift response in addressing these zero-day exploits, highlighting the importance of regular updates in maintaining device security. Users are advised to ensure their devices are set to receive automatic updates and to download them as soon as they become available. This incident underscores the ongoing challenges in securing mobile platforms against sophisticated cyber threats. Google continues to work closely with its security partners to enhance the security features of Android devices and prevent future exploits.**