Google may force Android phone makers to issue regular security updates – CNET

It'll reportedly be part of the contract that OEMs have to sign.