This bug in the Android lock screen allows anyone to send texts via Gemini without needing to enter your PIN.

      Google has confirmed that a fix is on the way for a concerning Gemini lock screen vulnerability.

      Your Android lock screen is designed to keep your messages secure, even if someone gains access to your phone. However, a recently identified bug in Gemini could undermine that security. Since May, The Register has collected various reports of users bypassing device authentication on Android 16 devices, enabling Gemini access straight from the lock screen.

      This vulnerability allows anyone to use Gemini to send SMS and WhatsApp messages without needing to enter your PIN. While it requires specific conditions to be met, its severity has prompted Google to announce that a fix is currently being rolled out.

      How does the Gemini bug circumvent your Android PIN?

      The exploit hinges on a precise action. Generally, if you have revoked Gemini’s access to Messages, any attempt to send a text from the lock screen would prompt the app to open, requiring your PIN for access. However, if you press Continue at the exact moment that Gemini’s Add Attachment button is activated, this security measure fails, allowing the SMS to be sent without any authentication.

      The situation escalates further. If you input something like @WhatsApp into Gemini's text field, it can silently reacquaint apps that you have previously disconnected, again without needing your PIN. As demonstrated in the video below, checking your settings afterward would indicate that WhatsApp is linked to Gemini as if you had permitted it yourself.

      How concerning is this, and what actions should you take?

      While this exploit necessitates physical possession of your phone, making it less hazardous than a remote attack, researchers caution that it could be exploited in cases of phone theft. This would enable thieves to send convincing messages from your number before you can reclaim your device.

      Interestingly, this bug is not exclusive to Pixel devices, although some users have reported being unable to replicate it on Samsung phones. Google has not yet specified which manufacturers or models are still at risk.

      Google has acknowledged the issue and has scheduled a comprehensive fix for this week. Until that update is installed on your phone, the safest option is to completely disable Gemini's access to the lock screen until the patch is available.

      ---

      Manisha Priyadarshini is a technology and entertainment writer with over nine years of editorial experience.

      ---

      Vivo X300 FE review: A compact flagship that exceeded my expectations

      The Vivo X300 FE embodies the essence of a flagship without the need for superpowers, managing to deliver better performance than its competitors.

      Why Hawkeye?

      Hawkeye may not be the strongest Avenger and lacks an eye-catching suit or superpowers. Yet, he consistently demonstrated his value through precision, dependability, and mastering the basics. Similarly, the Vivo X300 FE adheres to this philosophy, eschewing extravagant specifications or marketing tricks. Instead, it excels in the fundamentals with an impressive display, reliable performance, excellent cameras, and exceptional battery life. While it may not be in the spotlight, it proves to be the flagship that performs when needed.

      ---

      7 Apple Notes tips to enhance your note-taking experience

      A few small adjustments buried in the menus can transform Apple Notes into a completely different app.

      Over time, Apple has developed Apple Notes into one of the premier note-taking applications for the iPhone. However, many users treat it merely as a dumping ground for information and fail to utilize its full potential. Today, I will share seven of my favorite tips for Apple Notes that will enhance your note-taking experience.

      Switch between recently opened notes

      ---

      OnePlus has exited the market, making Android phones more mundane in the US

      I didn't anticipate that a smartphone brand's departure would affect me so deeply, but OnePlus's exit from the US and Europe genuinely has. The company has confirmed that it will cease launching new products in these markets, although existing customers will continue to receive software updates and after-sales support. So, while OnePlus isn't disappearing completely, it is withdrawing from two of the world's largest smartphone markets.

      Honestly, the Android market in the US already feels limited. When searching for a flagship, your realistic options typically begin and end with Samsung and Google. OnePlus was among the few brands that offered something distinctive, setting itself apart from the rest. That unique offering is what I will miss.