Connect with us

Technology

Android flaw lets hackers unlock phones in under a minute

Published

on

Android flaw lets hackers unlock phones in under a minute

NEWYou can now listen to Fox News articles!

Your phone lock screen is supposed to be your last line of defense. If your device gets lost or stolen, that PIN or passcode should keep strangers out of your photos, messages and financial apps. But researchers have found a serious flaw that can break through those protections on certain Android phones in less than a minute.

Once exploited, attackers can recover your phone’s PIN, unlock encrypted storage and even extract sensitive data such as cryptocurrency wallet seed phrases. Security researchers estimate that roughly one in four Android phones could be affected, particularly budget phones.

Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com –  trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.  

ANDROID FIXES 129 SECURITY FLAWS IN MAJOR PHONE UPDATE

Advertisement

Google’s March Android security update fixes 129 vulnerabilities, including a zero-day flaw already exploited in targeted attacks. (Firdous Nazir/NurPhoto)

All about the Android hacking flaw

A newly disclosed vulnerability, tracked as CVE-2026-20435 in the National Vulnerability Database, affects some Android phones powered by MediaTek, a major smartphone chip maker based in Taiwan that competes with companies like Qualcomm. These phones use a security component called Trustonic’s Trusted Execution Environment (TEE), which is designed to keep sensitive data, such as encryption keys, protected from the rest of the system.

It stores cryptographic keys that help keep your device encrypted and secure, even if someone tries to tamper with it. However, security analyses of the vulnerability indicate that these protections may be bypassed on affected devices.

By connecting a phone to a computer using a USB cable, an attacker with physical access may be able to exploit the flaw during the early boot process, potentially exposing sensitive data before full security protections are enforced. Think of it like accessing the master key before the safe door even closes. Once attackers gain access to these low-level components, they may be able to access encrypted storage without needing your PIN.

In a worst-case scenario, this type of access could allow attackers to extract highly sensitive information, including personal photos, stored passwords, private messages, financial data, and crypto wallet credentials. If seed phrases for crypto wallets are exposed, attackers could drain funds permanently.

Advertisement

What are Android makers doing about this

There’s limited action manufacturers can take on their own since the issue originates at the processor level, which is manufactured by MediaTek. The company says it has released a firmware patch addressing the vulnerability. However, the update must still be distributed by individual phone manufacturers through security updates. Depending on the device and whether it is still supported, that update could arrive quickly or not at all.

The good thing is that this attack requires physical access to the phone and a USB connection to a computer. That means it cannot be done remotely over the internet. However, if your phone is stolen, briefly confiscated, or even taken during a repair, the attacker could potentially extract sensitive information.

If you’re not sure whether this vulnerability affects your mobile device, you can look up your phone on a platform like GSMArena or your vendor’s website to see which SoC it uses, then cross-check it with MediaTek’s March security bulletin under CVE-2026-20435. You can log onto corp.mediatek.com/product-security-bulletin/March-2026 to review the list of affected chipsets and confirm whether your device may be at risk.

CyberGuy reached out to MediaTek for comment, but did not hear back before our deadline.

NEW ANDROID ATTACK TRICKS YOU INTO GIVING DANGEROUS PERMISSIONS

Advertisement

A new Android banking trojan called Sturnus can take over your screen, steal your banking credentials and even read encrypted chats from apps you trust. (Delmaine Donson/Getty Images)

How to tell if your phone is affected

So how do you know if your phone is actually at risk? Not every Android phone is vulnerable. The issue primarily affects devices that use certain MediaTek processors. Here’s how to check your phone:

1) Find your phone model

Go to Settings > About phone and look for your exact model name.

2) Look up your processor (chip)

Search your phone model on a site like GSMArena or your manufacturer’s website to find the processor (also called the SoC).

3) Check if it uses MediaTek

If your phone uses a MediaTek chip, it may be affected. Devices with Qualcomm Snapdragon or Google Tensor chips are not part of this specific issue.

Advertisement

4) Install the latest security updates immediately

Check your phone’s system update settings and install any available updates from your manufacturer.  Go to Settings > Software update and install any available updates. MediaTek has already released a fix, but phone makers must distribute it. Installing updates quickly ensures you receive the firmware patch if your device manufacturer has released it.

7 ways you can protect your phone from getting hacked

If your phone uses one of the affected chips, a few simple precautions can help reduce the chances of someone accessing your data if the device ever falls into the wrong hands.

1) Install strong antivirus protection

A security app cannot fix this processor-level flaw. However, it can still help protect your phone from other threats that often follow stolen or compromised devices. It will not stop this specific exploit, but it can detect malicious apps, spyware, and suspicious activity that attackers may install after gaining access. That extra layer of monitoring can help stop additional data theft if your device ever falls into the wrong hands. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

2) Avoid keeping sensitive information on your phone

If you store things like cryptocurrency wallet seed phrases, recovery codes, or sensitive documents in notes apps or screenshots, consider moving them to a secure offline location. If someone extracts your phone’s data through this vulnerability, that information could be exposed.

3) Keep physical control of your phone

This exploit requires someone to physically connect your phone to a computer. Do not leave your device unattended in public places, and be cautious when handing it to repair shops or unknown technicians. Physical access dramatically increases the risk.

Advertisement

4) Use strong screen locks and auto-lock settings

While the vulnerability bypasses encryption on affected devices, strong lock settings still protect against many other threats. Use a longer PIN or passcode instead of simple patterns, and enable automatic locking after short periods of inactivity.

5) Protect accounts with two-factor authentication

Even if attackers gain access to data on your phone, two-factor authentication (2FA) can stop them from logging into your online accounts. Enable it for email, banking apps, cloud storage, and social media wherever possible.

6) Use a password manager

A password manager stores your login credentials in a secure, encrypted vault instead of leaving them scattered across apps and notes. If someone compromises your device, the password manager still protects your accounts with strong encryption, forcing attackers to break through another security layer before they can access your logins. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com

7) Enable USB restricted mode (if available)

Some Android devices limit USB data access when locked. Turning on this setting can reduce the risk of unauthorized data extraction through a wired connection, especially in situations where someone briefly gains physical access to your phone. On Samsung phones running the latest software:

Settings may vary slightly depending on your Samsung model and software version.

Advertisement

Go to Settings

Tap Lock screen

Then, tap Secure lock settings

Enter your current PIN, then tap Continue

Enable “Lock network and security” (or a similarly named option) to help block USB data access while your device is locked.

Advertisement

ZeroDayRAT spyware can secretly access messages, camera feeds and banking apps on infected iPhone and Android devices. (Stefan Sauer/picture alliance)

Kurt’s key takeaway

This vulnerability exposes a deeper issue with the Android ecosystem. Even when chipmakers release a fix, millions of phones depend on manufacturers to deliver updates that may never arrive, especially for cheaper devices that lose support quickly. We often assume our lock screen and encryption will protect our data if a phone is lost or stolen. However, incidents like this show that protection is only as strong as the update policies behind it. When devices stop receiving security patches, those protections quietly weaken over time.

Should phone manufacturers be required to guarantee security updates for several years if their devices contain critical encryption vulnerabilities? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com –  trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Advertisement

Copyright 2026 CyberGuy.com.  All rights reserved.  

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Skullcandy’s bass-boosting Crusher headphones now come with Bose’s ANC

Published

on

Skullcandy’s bass-boosting Crusher headphones now come with Bose’s ANC

Skullcandy announced a new version of its Crusher wireless headphones today featuring a few of Bose’s audio technologies including its QuietControl ANC and head-tracking spatial audio. The Crusher headphone line differentiates itself from the competition through the use of both full-range and dedicated bass drivers in each ear cup to boost deeper frequencies. Skullcandy admits that approach can result in a loss of audio quality when the bass is heavily boosted, but its new Crusher 1080 ANC are meant to address and improve that with Bose’s help.

Available starting today for $279.99 in black, candy, primer, and cement color options, the new Crusher 1080 ANC feature redesigned drivers with a stiffer diaphragm material resulting in enhanced clarity and detail with less distortion at higher volume. As with previous models in the Crusher line, the bass boosting is entirely adjustable using Skullcandy’s mobile app or the on-headphone controls that now include a more prominent dial on the outside.

The Crusher 1080 ANC will be the first non-Bose headphones to feature that company’s TrueSpatial audio technology with head tracking that works whether you’re stationary or out for a run and its WaveForm audio engine that “keeps audio full, balanced, and smooth.” Skullcandy’s latest will also offer industry-leading noise cancellation with Bose’s six microphone QuietControl ANC tech that adapts as sounds around you get louder or quieter. The Crusher 1080ANC even features Bose’s SpeechClarity that reduces noise so your voice comes through clearly during a call, but they’re not the first third-party headphones to offer it.

Battery life is estimated to be up to 60 hours with ANC turned off, or 50 hours with it on, while a 10-minute rapid charge will keep the Crusher 1080 ANC going for up to four hours if they die. There’s multipoint pairing for connecting and switching between multiple devices, auto reconnect and wear detection that pauses music when you take the headphones off, and a design that folds flat for easier storage. The Crusher 1080 ANC supports Bluetooth 5.3 with LE Audio, low latency audio, and Auracast.

Continue Reading

Technology

You paid for it. So why is your device showing ads?

Published

on

You paid for it. So why is your device showing ads?

NEWYou can now listen to Fox News articles!

You paid for the product. So why does it feel like the company still controls the screen? That is the question more of us are starting to ask as smart devices get updated long after we bring them home. A refrigerator can show ads in your kitchen. A car can flash offers on the dashboard. Even a Windows 11 computer can surface promotions before you get to work.

The frustrating part is that this often happens through software updates. You tap update because you want your device to stay secure and work properly. Then one day, the product you bought starts acting like a billboard. This is also why it pays to understand the hidden privacy clauses and settings that come with smart products before those screens start doing things you never expected.

GOOGLE TURNS OLD PHONES INTO CLOUD SERVERS

Smart devices from refrigerators to cars and computers can show ads after software updates, raising questions about who controls screens consumers already paid for. (Michele Tantussi/Getty Images)

Advertisement

Free live CyberGuy class: Sick of Spam? Join us July 22.

Join us Wednesday, July 22, at 1 p.m. ET for a free CyberGuy Live class that will help you cut down on robocalls, spam texts, junk email and other unwanted messages. Kurt “CyberGuy” Knutsson will walk you step by step through simple ways to filter spam, clean up your inbox and recognize the messages that could put your personal information at risk. No technical experience is needed. You’ll also receive our spam-stopping checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

Samsung Family Hub refrigerators started showing ads

Samsung Family Hub refrigerators are sold as connected kitchen hubs. You can use the screen for weather, calendars, grocery lists and other household features. But as we discussed on The CyberGuy Report podcast at CyberGuy.com, that same screen can also become a place for ads after a software update. Samsung began showing ads on some Family Hub refrigerator Cover Screens in the U.S. We reached out to Samsung about this, and a spokesperson provided us with this statement:

“Last year, Samsung piloted a new Cover Screen widget on Family Hub refrigerators in the U.S. The widget rotates through useful information like weather, news, calendar events, and curated ads. After the pilot concluded in March, the widget was launched fully with the same user experience.

Advertisement

Users can turn off the Cover Screen widget, including ads, in the Advertisements tab of the Settings menu (Settings > Advertisements > Cover screen Ads) without impacting any other features or functions. Ads can also be dismissed on the Cover Screens where shown, meaning that the dismissed ad will not appear again during that specific ad’s campaign period. Since the start of the pilot program last October, our review has indicated consumers are finding value in this new widget. The percentage of users who have turned off the feature is in the low single-digits.

A Cover Screen appears when the Family Hub screen is idle, and the widget only appears on the Weather, Color, and Daily Board themes. The widget does not appear on the Cover Screen’s Art or Album themes.”

That answer is important because Samsung says you can turn the Cover Screen ads off without losing other features. Still, the larger point remains. You bought a refrigerator, then a later update added an ad experience to the screen in your kitchen.

How to turn off Samsung Family Hub Cover Screen ads

On the Family Hub screen:

  • Tap Settings
  • Tap Advertisements
  • Tap Cover Screen Ads
  • Turn the switch off

You can also change the Cover Screen theme. Samsung says the widget does not appear on Art or Album themes.

Car screen ads appeared in Jeep, Ram and Chrysler vehicles

Now move from the kitchen to the driveway. Some Jeep, Ram and Chrysler drivers previously saw promotional messages on their infotainment screens through Stellantis’ Uconnect system.

Advertisement

Stellantis, the automaker behind Jeep, Ram, Chrysler and Dodge, says its In-Vehicle Message technology, or IVM, is designed to help the company stay in contact with owners at important points during ownership. The company says it uses IVM for important messages, such as vehicle recalls and vehicle health monitor alerts. Stellantis also confirmed that the earlier pop-up promotions were part of its in-vehicle messaging or Uconnect communication system. However, the company says it has not run the promotional in-vehicle messages referenced in those reports since mid-fall 2025 and has nothing planned for future in-vehicle promotional messages.

At the time those promotional messages were active, Stellantis says owners could opt out by calling customer service or by updating their profile or Message Settings on their vehicle brand’s website account, such as a Ram owner account. That update is important. There are no current promotional in-vehicle messages to opt out of, according to Stellantis. Still, the larger concern remains: modern vehicles are software-driven, and the screen in the middle of your dashboard can be changed long after you drive off the lot.

10 SMALL HOME UPGRADES THAT CAN LOWER YOUR MONTHLY BILLS

Some Jeep, Ram and Chrysler drivers previously saw promotional messages on infotainment screens through Stellantis’ Uconnect system. (Kurt “Cyberguy” Knutsson)

Why dashboard messages feel more intrusive

A car screen is different from a phone app or website. You use that display for directions, music, climate controls and vehicle settings. So when a promotional message appears there, it can feel more personal than an ad on a webpage.

Advertisement

To be fair, in-vehicle messaging can serve an important purpose. Recall notices and vehicle health alerts can help owners respond to safety or maintenance issues faster.

However, promotional messages hit differently. You are sitting in a car you paid tens of thousands of dollars for. That screen should help you drive, maintain your vehicle and get where you are going without feeling like another place for a sales pitch.

Windows 11 ads can appear in several places

Then there is your computer. Windows 11 can show promotional content in places that feel like part of the operating system. That includes the lock screen, the Start menu and account-related notifications.

The lock screen can use Windows Spotlight, which displays rotating images along with tips, tricks and notifications. Start menu settings also include areas where Microsoft can show recommendations and account prompts.

Some of these messages may look like helpful notices. Others can feel like upsells. The most annoying ones are the alerts that look urgent, then steer you toward a Microsoft service such as OneDrive backup. Microsoft declined to comment for this story.

Advertisement

How to reduce ads and suggestions in Windows 11

You can cut down on much of this in Settings.

Change the lock screen:

  • Go to Settings
  • Click Personalization
  • Click Lock screen
  • Change Windows Spotlight to Picture
  • Turn off Get fun facts, tips, tricks and more on your lock screen

Reduce Start menu suggestions:

  • Go to Settings
  • Click Personalization
  • Click Start
  • Turn off any available toggles for recommendations, tips, suggestions or personalized offers

FIVE DATA BROKER OPT-OUT MYTHS THAT LEAVE RETIREES EXPOSED

Samsung says Family Hub refrigerator Cover Screen ads can be turned off, but the feature highlights how connected appliances can change after purchase. (SeongJoon Cho/Bloomberg via Getty Images)

Limit account-related prompts:

  • Go to Settings
  • Click Personalization
  • Click Start
  • Turn off Show account-related notifications

Microsoft may change wording over time, so look for anything tied to recommendations, tips, suggestions, offers or account notifications. For more Windows settings help, see these Windows 11 tips.

Device screen ads are spreading after you buy

The real problem isn’t one ad on one screen. It is the fact that software gives companies a way to change products after you buy them. A refrigerator used to stay a refrigerator. A car dashboard used to do what it did on the day you drove off the lot. A computer operating system used to feel like the tool you used to get things done.

Now those screens can change later. A company can add a widget, promote a service or push an offer through an update. That does not mean every update is bad. Security fixes are essential. Bug fixes help. New features can be useful. However, ads feel different when they arrive after you already paid for the product. That is why you should keep your devices updated, but also check what changed after the update installs.

What this means to you

Before you buy a smart appliance, connected car or computer, think beyond the hardware. Ask what kind of software controls the screen. Check whether ads, recommendations or promotional content can be turned off.

Advertisement

After setup, go through the settings before you assume the default experience is the only option. Look for menus labeled ads, recommendations, notifications, tips, offers or personalization. If you are setting up a new device, this new electronics setup guide is a good place to start.

Also, pay attention after updates. If a new widget or pop-up appears, do not assume you have to live with it. There may be a buried toggle that turns it off. Most of all, remember that a screen in your home, car or office has value. Companies know that. You should know it too.

Kurt’s key takeaways

This is exactly why we covered this on The CyberGuy Report podcast at CyberGuy.com. It hits a nerve because you already paid for these products, yet companies can still use software updates to claim space on the screens you see every day. Samsung says Family Hub Cover Screen ads can be turned off. Stellantis says its vehicle promotions stopped in the fall of 2025. Windows 11 gives you some settings that reduce tips, suggestions and account prompts. Still, the pattern is hard to ignore. Companies are learning how to keep making money from a product after the sale. That may be great for them, but it can feel pretty lousy when the screen is inside your kitchen, your car or your computer. When you pay thousands of dollars for a product, that screen should work for you instead of becoming another place for a company to sell to you.

Which screen ad would bother you most: one on your refrigerator, one on your computer or one in your car? Let us know by writing to us at CyberGuy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Advertisement

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading

Technology

Lucid’s bankruptcy rumor is a bad sign for the EV future

Published

on

Lucid’s bankruptcy rumor is a bad sign for the EV future

Lucid Motors found itself in a tough bind this week, fending off bankruptcy rumors and watching its stock price plunge as a result. The company quickly denied the report, calling it “completely false” and pointing to its available free cash flow as evidence that it has enough runway to operate into next year.

But despite the swift response, the damage was widespread. The panic immediately bled into competing automakers, pulling down shares of Rivian and Polestar as investors speculated about the long-term survival of EV-only companies in the face of slowing consumer demand and whiplash policy shifts. And it cast a harsh light on the precarity of all three companies and the future of electric vehicles.

The trouble started on Tuesday, when EV trade publication EV reported that restructuring firm AlixPartners had advised Lucid’s board to consider Chapter 11 bankruptcy or a take-private deal. The report also said AlixPartners had encouraged the board to further restructure in the US and Europe and to focus on the Gravity SUV. But while the rest of the media has since reported on Lucid’s denial, no other publication has confirmed EV’s scoop. (For what its worth, EV’s URL is “eletric-vehicle.com,” enshrining the incorrect spelling in its address.)

Lucid confirmed that it had hired AlixPartners, but denied that the firm had made any such recommendations to its board. Instead, AlixPartners would provide advice on “improving execution, strengthening operations and positioning Lucid to realize the full potential of its technology, products and innovation,” Lucid chief communications officer Nick Twork said.

Lucid went a step further, filing a cease and desist order against EV

Advertisement

Lucid went a step further, filing a cease and desist order against EV, claiming that the site’s report directly led to the stock crash. “In short, your actions caused serious injury to a number of investors,” Lucid’s chief legal officer and general counsel, Brian Tomkiel, said in the letter. “And they injured, and continue to injure, Lucid directly.”

Still, the timing was terrible. Lucid is genuinely not in good shape, having lost over $1 billion in the first quarter of the year. The company has also gone through two rounds of layoffs in 2026, having cut 12 percent of staff in February and then 18 percent in June. The company also reduced production at its factory in Arizona in a bid to counteract its high inventory and save money. And there’s been leadership turmoil, with COO Marc Winterhoff departing the company and his position being eliminated entirely in an effort to flatten the structure.

The report sent the stock into freefall, plummeting as much as 50 percent in one of the worst single-day drops in Lucid’s history. And with Polestar and Rivian also catching strays, it’s generally been a glum time for companies not named Tesla trying make a go of exclusively building electric vehicles. Wall Street is panicking because the rumors are aligning with the bad news coming out of these companies’ earnings reports. EV sales are stabilizing, but recovery is still a distant promise. The all-electric future seems further away than ever.

Whether or not Lucid is actually weighing Chapter 11, it’s a sure sign of more turbulent waters ahead. Polestar getting strong-armed out of the US over its Chinese ties has left a lot of EV owners and dealers scratching their heads. Rivian is in an increasingly precarious position thanks to its huge, expensive bet on becoming a mass-market car company with the production of the R2.

All of these companies are increasingly reliant on big stakeholders — Lucid with Saudi Arabia’s Public Investment Fund, Polestar with Geely, and Rivian with Volkswagen — for their future survival. If any of these big backers get cold feet, the future could get really dark really fast.

Advertisement
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading
Advertisement

Trending