Google has announced a new feature for Android 14 that allows IT admins to turn off 2G support on managed corporate devices. Although the old mobile network will soon be shut down by operators, support is still present on smartphones and tablets, so there is a real security risk.

Better security without 2G

In the US, many carriers have shut down 2G networks. In Italy they are still active because they are used for M2M (Machine to Machine) communications. However, mobile devices still support 2G network. The technology, introduced in 1991, doesn’t offer the same level of protection as later generations, so it allows cybercriminals to intercept and decrypt traffic via FSB (False Base Station), IMSI catcher or Stingray. There are malware that downgrades your connection to 2G, ignoring other networks.

Starting with Android 14, Android Enterprise customers will be able to turn off 2G support, so any cyberattacks won’t be able to downgrade. Company IT administrators will be able to configure protection based on specific needs, such as when employees travel to certain risky countries.

Android 14 will also offer protection against null cipher connections. The operating system protects all IP traffic with end-to-end encryption. Traditional voice traffic and SMS are only protected by the link layer. Some commercial networks do not use any encryption, so voice traffic and SMS can be easily intercepted. Android 14 allows you to block null cipher connections.

Speaking of security, Google has communicated that the RCS (Rich Communication Services) protocol is active by default in the Messages app (if it has not previously been deactivated in the settings) and that all RCS conversations (one-to-one and group) are protected by end-to-end encryption.