Found this via a recent Google blog post.

https://security.googleblog.com/2018/10/google-and-android-h...