This bug in the Android lock screen allows anyone to send messages through Gemini without needing to enter your PIN.
Google has confirmed that a fix is on the way for a dangerous bug affecting the Gemini lock screen.
Your Android lock screen is meant to secure your messages, even if someone else has access to your phone. However, a newly identified bug with Gemini could compromise this security. Since May, The Register has received numerous reports of users successfully bypassing device authentication on Android 16 devices, allowing access to Gemini directly from the lock screen.
This vulnerability enables anyone to use Gemini to send SMS and WhatsApp messages without needing to enter the PIN. Although it works under certain conditions, its severity has prompted Google to confirm that a fix is currently being implemented.
How does the Gemini bug bypass your Android PIN?
The exploit involves a precise action. Typically, if you revoke Gemini's access to Messages, it will request you to open the app to send a text from the lock screen, which correctly prompts for your PIN. However, if you press Continue at the same time as the Gemini Add Attachment button, it entirely bypasses this security measure, allowing the SMS to be sent without authentication.
The situation can worsen further. Entering something like @WhatsApp into Gemini’s text box can silently reconnect apps that you had previously unlinked, again without needing your PIN. As demonstrated in the accompanying video, checking your settings afterward would show WhatsApp linked to Gemini as if you had authorized it yourself.
How risky is this, and what should you do?
The exploit requires someone to physically have your phone, making it less concerning than a remote attack. Nevertheless, researchers have cautioned that it could be exploited in phone theft scenarios, enabling criminals to send deceptive messages from your number before you regain access to your device.
Notably, this bug is not exclusive to Pixel devices; however, some users have reported it not being reproducible on Samsung devices. Google has not yet specified which manufacturers or models might still be at risk.
Google has acknowledged the issue and has planned a comprehensive fix for deployment this week. Until the update is available for your phone, the safest course of action is to completely disable Gemini’s lock screen access until the patch is released.
---
Manisha Priyadarshini is a tech and entertainment writer with over nine years of editorial expertise.
---
Vivo X300 FE review: The compact flagship I didn’t expect to appreciate this much
The Vivo X300 FE is the Hawkeye of flagship devices. It lacks extraordinary abilities but somehow performs better than the competition.
Why Hawkeye?
Hawkeye was never the strongest Avenger and didn’t possess the flashiest suit or superpowers. Yet, he consistently demonstrated his value through precision, dependability, and exceptional execution of the fundamentals. The Vivo X300 FE embodies this philosophy. It doesn't chase after extravagant specifications or marketing hype. Instead, it efficiently delivers on the essentials with an impressive display, reliable performance, excellent cameras, and remarkable battery life. While it may not attract all the attention, it’s the flagship that truly delivers when it counts.
---
7 Apple Notes tips to enhance your note-taking experience
A few minor adjustments hidden in the menus can transform Apple Notes into a completely different application.
Over the years, Apple has developed Apple Notes into one of the best note-taking apps for the iPhone. However, most users tend to use it merely as a space to store information, not fully utilizing its capabilities. Today, I will share seven of my favorite Apple Notes tips to enhance your note-taking experience.
Switch between recently opened notes
---
OnePlus has exited the market, making Android phones feel more mundane in the US
I didn’t anticipate that the departure of a smartphone brand would affect me this much, but OnePlus's exit from the US and Europe genuinely has. The company has confirmed that it will stop launching new products in these markets, although current customers will continue to receive software updates and after-sales support. Thus, while OnePlus isn’t disappearing entirely, it is withdrawing from two of the largest smartphone markets globally.
To be frank, the Android market in the US already seems limited. When looking for a flagship, your practical options typically begin with Samsung and end with Google. OnePlus was among the few brands positioned in between, offering something that didn’t exactly resemble everything else. And that’s precisely what I will miss.
Other articles
The software update for your next car might turn out to be its greatest security vulnerability.
Experts indicate that over-the-air updates for vehicles are revolutionizing the automotive industry but are also introducing new cybersecurity and national security concerns that governments can no longer overlook.
Prysmian enters into a €5.5 billion agreement with Molex to provide fiber optics for AI data centers.
Prysmian has entered into a 10-year agreement valued at €5.5 billion with Molex, which is owned by Koch, to provide optical cable for use in AI data centres, including an initial payment of €550 million.
The software update for your next car might turn out to be its greatest security threat.
Experts indicate that over-the-air updates for vehicles are revolutionizing the automotive sector but are also giving rise to new cybersecurity and national security threats that governments must address.
Samsung eliminates 739 positions in New Jersey as it moves its US headquarters to Texas.
A WARN filing indicates that Samsung is eliminating 739 positions in New Jersey, which represents approximately 62% of the workforce at that location, as its US consumer division is set to move to Texas by the close of 2026.
7 Tips for Enhancing Your Apple Notes Experience
From highlighted text to password-protected notes, here are seven Apple Notes tips hidden in menus you may have overlooked numerous times.
The 'synthetic insider': AI-generated deepfakes posing as fictitious employees.
AI deepfakes enable hackers to impersonate employees, creating a "synthetic insider" threat. However, the majority of insider leaks continue to be unintentional, and AI agents represent the next potential hazard.
This bug in the Android lock screen allows anyone to send messages through Gemini without needing to enter your PIN.
A recently found Gemini bug allows anyone to circumvent your Android PIN, enabling them to send SMS and WhatsApp messages from a locked device.