Technology
Android flaw lets hackers unlock phones in under a minute
NEWYou can now listen to Fox News articles!
Your phone lock screen is supposed to be your last line of defense. If your device gets lost or stolen, that PIN or passcode should keep strangers out of your photos, messages and financial apps. But researchers have found a serious flaw that can break through those protections on certain Android phones in less than a minute.
Once exploited, attackers can recover your phone’s PIN, unlock encrypted storage and even extract sensitive data such as cryptocurrency wallet seed phrases. Security researchers estimate that roughly one in four Android phones could be affected, particularly budget phones.
Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
ANDROID FIXES 129 SECURITY FLAWS IN MAJOR PHONE UPDATE
Google’s March Android security update fixes 129 vulnerabilities, including a zero-day flaw already exploited in targeted attacks. (Firdous Nazir/NurPhoto)
All about the Android hacking flaw
A newly disclosed vulnerability, tracked as CVE-2026-20435 in the National Vulnerability Database, affects some Android phones powered by MediaTek, a major smartphone chip maker based in Taiwan that competes with companies like Qualcomm. These phones use a security component called Trustonic’s Trusted Execution Environment (TEE), which is designed to keep sensitive data, such as encryption keys, protected from the rest of the system.
It stores cryptographic keys that help keep your device encrypted and secure, even if someone tries to tamper with it. However, security analyses of the vulnerability indicate that these protections may be bypassed on affected devices.
By connecting a phone to a computer using a USB cable, an attacker with physical access may be able to exploit the flaw during the early boot process, potentially exposing sensitive data before full security protections are enforced. Think of it like accessing the master key before the safe door even closes. Once attackers gain access to these low-level components, they may be able to access encrypted storage without needing your PIN.
In a worst-case scenario, this type of access could allow attackers to extract highly sensitive information, including personal photos, stored passwords, private messages, financial data, and crypto wallet credentials. If seed phrases for crypto wallets are exposed, attackers could drain funds permanently.
What are Android makers doing about this
There’s limited action manufacturers can take on their own since the issue originates at the processor level, which is manufactured by MediaTek. The company says it has released a firmware patch addressing the vulnerability. However, the update must still be distributed by individual phone manufacturers through security updates. Depending on the device and whether it is still supported, that update could arrive quickly or not at all.
The good thing is that this attack requires physical access to the phone and a USB connection to a computer. That means it cannot be done remotely over the internet. However, if your phone is stolen, briefly confiscated, or even taken during a repair, the attacker could potentially extract sensitive information.
If you’re not sure whether this vulnerability affects your mobile device, you can look up your phone on a platform like GSMArena or your vendor’s website to see which SoC it uses, then cross-check it with MediaTek’s March security bulletin under CVE-2026-20435. You can log onto corp.mediatek.com/product-security-bulletin/March-2026 to review the list of affected chipsets and confirm whether your device may be at risk.
CyberGuy reached out to MediaTek for comment, but did not hear back before our deadline.
NEW ANDROID ATTACK TRICKS YOU INTO GIVING DANGEROUS PERMISSIONS
A new Android banking trojan called Sturnus can take over your screen, steal your banking credentials and even read encrypted chats from apps you trust. (Delmaine Donson/Getty Images)
How to tell if your phone is affected
So how do you know if your phone is actually at risk? Not every Android phone is vulnerable. The issue primarily affects devices that use certain MediaTek processors. Here’s how to check your phone:
1) Find your phone model
Go to Settings > About phone and look for your exact model name.
2) Look up your processor (chip)
Search your phone model on a site like GSMArena or your manufacturer’s website to find the processor (also called the SoC).
3) Check if it uses MediaTek
If your phone uses a MediaTek chip, it may be affected. Devices with Qualcomm Snapdragon or Google Tensor chips are not part of this specific issue.
4) Install the latest security updates immediately
Check your phone’s system update settings and install any available updates from your manufacturer. Go to Settings > Software update and install any available updates. MediaTek has already released a fix, but phone makers must distribute it. Installing updates quickly ensures you receive the firmware patch if your device manufacturer has released it.
7 ways you can protect your phone from getting hacked
If your phone uses one of the affected chips, a few simple precautions can help reduce the chances of someone accessing your data if the device ever falls into the wrong hands.
1) Install strong antivirus protection
A security app cannot fix this processor-level flaw. However, it can still help protect your phone from other threats that often follow stolen or compromised devices. It will not stop this specific exploit, but it can detect malicious apps, spyware, and suspicious activity that attackers may install after gaining access. That extra layer of monitoring can help stop additional data theft if your device ever falls into the wrong hands. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
2) Avoid keeping sensitive information on your phone
If you store things like cryptocurrency wallet seed phrases, recovery codes, or sensitive documents in notes apps or screenshots, consider moving them to a secure offline location. If someone extracts your phone’s data through this vulnerability, that information could be exposed.
3) Keep physical control of your phone
This exploit requires someone to physically connect your phone to a computer. Do not leave your device unattended in public places, and be cautious when handing it to repair shops or unknown technicians. Physical access dramatically increases the risk.
4) Use strong screen locks and auto-lock settings
While the vulnerability bypasses encryption on affected devices, strong lock settings still protect against many other threats. Use a longer PIN or passcode instead of simple patterns, and enable automatic locking after short periods of inactivity.
5) Protect accounts with two-factor authentication
Even if attackers gain access to data on your phone, two-factor authentication (2FA) can stop them from logging into your online accounts. Enable it for email, banking apps, cloud storage, and social media wherever possible.
6) Use a password manager
A password manager stores your login credentials in a secure, encrypted vault instead of leaving them scattered across apps and notes. If someone compromises your device, the password manager still protects your accounts with strong encryption, forcing attackers to break through another security layer before they can access your logins. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com
7) Enable USB restricted mode (if available)
Some Android devices limit USB data access when locked. Turning on this setting can reduce the risk of unauthorized data extraction through a wired connection, especially in situations where someone briefly gains physical access to your phone. On Samsung phones running the latest software:
Settings may vary slightly depending on your Samsung model and software version.
Go to Settings
Tap Lock screen
Then, tap Secure lock settings
Enter your current PIN, then tap Continue
Enable “Lock network and security” (or a similarly named option) to help block USB data access while your device is locked.
ZeroDayRAT spyware can secretly access messages, camera feeds and banking apps on infected iPhone and Android devices. (Stefan Sauer/picture alliance)
Kurt’s key takeaway
This vulnerability exposes a deeper issue with the Android ecosystem. Even when chipmakers release a fix, millions of phones depend on manufacturers to deliver updates that may never arrive, especially for cheaper devices that lose support quickly. We often assume our lock screen and encryption will protect our data if a phone is lost or stolen. However, incidents like this show that protection is only as strong as the update policies behind it. When devices stop receiving security patches, those protections quietly weaken over time.
Should phone manufacturers be required to guarantee security updates for several years if their devices contain critical encryption vulnerabilities? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Xbox just allcapsmaxxed: Meet XBOX. This isn’t a joke; Microsoft appears to be actually rebranding Xbox to XBOX. Asha Sharma, Xbox CEO, ran a poll on X earlier this week, asking fans whether Microsoft should use Xbox or XBOX. The results were in favor of XBOX, and the company has now renamed its X account.
Curiously, the Threads and Bluesky accounts for Xbox haven’t been renamed yet, but if Microsoft is going ahead with a rebranding then I expect those will change soon. I asked Microsoft to comment on this potential Xbox rebranding and the company simply referred me to Sharma’s post.
The use of all caps for Xbox is a return to original form, though. Microsoft’s first Xbox logo for its console was all caps, and the company has favored using similar capped versions for the Xbox 360, Xbox One, and Xbox Series X / S console logos.
The apparent rebranding comes just a few weeks after Sharma scrapped Microsoft Gaming and renamed Microsoft’s gaming division back to Xbox. It’s part of Sharma’s continued promise of a “return of Xbox,” which has involved fan-focused console updates, a new Xbox logo, Game Pass pricing changes, and lots more in recent weeks.
NEWYou can now listen to Fox News articles!
Artificial intelligence (AI) already shows up in your phone, your searches and plenty of apps you use every day. Now, some Silicon Valley investors are betting the machines behind those AI answers could one day run at sea.
A company called Panthalassa has raised $140 million in new funding to develop and deploy autonomous, floating AI computing nodes powered by ocean waves. The Series B round brings Panthalassa’s total funding to $210 million, a sign that investors are taking this ocean-based AI idea seriously. The round was led by Peter Thiel, the Palantir co-founder, and the company says the money will help complete a pilot manufacturing facility near Portland, Oregon. Panthalassa also plans to deploy its Ocean-3 pilot node series in the northern Pacific Ocean later in 2026.
Instead of building another giant AI data center on land, Panthalassa wants to place computing power out at sea. Ocean waves would generate electricity. Seawater would help with cooling. Onboard computing systems would process AI prompts and send the results back to land through low-Earth-orbit satellites.
Sign up for my FREE CyberGuy Report
LOWERING YOUR ELECTRIC BILL COULD BE FLOATING IN THE OCEAN
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
META BUILDS WORLD’S LARGEST AI SUPERCLUSTERS FOR THE FUTURE
Panthalassa’s Ocean-2 prototype rides in open water during testing, giving a real-world look at the kind of floating wave-energy system behind the company’s ocean AI plan. (Panthalassa)
How AI data centers at sea could work
Panthalassa’s floating nodes are designed to capture wave motion and turn it into electricity. The company says it has spent a decade developing the technology behind its power generation, onboard computing and autonomous ocean operations. Its earlier Ocean-1, Ocean-2 and Wavehopper prototypes were tested in 2021 and 2024. Think of each node like a floating power station with AI hardware inside. Waves move the system. That motion helps drive a generator. The power then feeds the onboard chips.
WHY AI IS CAUSING SUMMER ELECTRICITY BILLS TO SOAR
The company’s plan is to use those chips for AI inference. That is the part of AI where a model responds to your prompt after it has already been trained. In simple terms, it is what happens when you ask a chatbot a question and get an answer back. That makes the ocean plan a little easier to understand. Training massive AI models requires huge data movement and tight coordination. Answering prompts may be more realistic for a floating node, at least in some situations.
Why AI data centers are moving offshore
AI data centers need huge amounts of electricity. They also need space, cooling systems and local support from communities that may not want a massive facility nearby. Those problems have pushed companies to look for unusual answers. Ocean-based computing is one of them.
Panthalassa says its nodes would operate far from shore in wave-rich parts of the ocean. The goal is to use that wave energy directly onboard instead of sending the power back to land. “We’ve built a technology platform that operates in the planet’s most energy-dense wave regions, far from shore, and turns that resource into reliable clean power,” said Garth Sheldon-Coulson, Panthalassa’s co-founder and CEO.
A SUPERCOMPUTER CHIP GOING TO SPACE COULD CHANGE LIFE ON EARTH
The ocean also offers cold surrounding water. That could help cool the chips onboard. Cooling is a major issue because data centers produce a lot of heat. Panthalassa is taking a different path from traditional land-based data centers. Instead of pulling more power from the grid, it wants floating nodes that generate their own electricity from waves.
A SUPERCOMPUTER CHIP GOING TO SPACE COULD CHANGE LIFE ON EARTH
The Ocean-2 prototype sits inside a coastal facility, showing the size and shape of Panthalassa’s floating node before deployment at sea. (Panthalassa)
The satellite problem for ocean AI data centers
The ocean may help with power and cooling, but it creates another problem: connection. Traditional data centers rely on high-capacity fiber-optic connections because they need to move huge amounts of data fast. A floating node far out at sea may depend on low-Earth-orbit satellite links. That can work for some AI responses, but it may be slower and more limited than fiber.
SOLAR DEVICE TRANSFORMS USED TIRES TO HELP PURIFY WATER SO THAT IT’S DRINKABLE
The challenge grows when multiple nodes need to work together. AI systems often depend on fast communication between chips, servers and storage. If those parts are floating in the ocean and talking by satellite, coordination gets harder. That means AI data centers at sea may not replace land-based data centers anytime soon. They may be better suited for certain AI tasks where the model can live onboard, and the response does not require constant back-and-forth with other machines.
Repairing floating AI nodes could be difficult
There is another practical question: What happens when something breaks? A land-based data center can send in technicians. A floating AI node in rough seas may need a ship, special equipment and the right weather window. That adds cost and delay.
Panthalassa says it is developing autonomous systems meant for harsh ocean conditions. Its press release says Ocean-3 testing is meant to demonstrate AI inference and refine manufacturing before commercial deployments in 2027. Still, the ocean is brutal. Saltwater eats away at equipment. Storms can turn a routine repair into a major operation. Constant motion also puts stress on the hardware. For this plan to work, Panthalassa will have to show that each node can keep running for years in harsh ocean conditions without frequent human repairs.
WHY AI IS CAUSING SUMMER ELECTRICITY BILLS TO SOAR
Panthalassa’s Ocean-2 prototype is transported by barge, a reminder that building AI infrastructure at sea also means solving major deployment and maintenance challenges. (Panthalassa)
Ocean data centers have been tested before
Ocean data centers are not new. Microsoft experimented with underwater data center servers through Project Natick, including tests in 2015 and 2018. Those tests showed that sealed underwater servers could run reliably while using seawater for cooling, with Microsoft reporting a lower failure rate than comparable land-based systems. Microsoft later ended the project.
Chinese companies have also reportedly pushed ahead with underwater data center projects near Hainan and Shanghai. Keppel has explored floating data center designs in Singapore, where land constraints make the concept especially attractive. Panthalassa’s plan goes in a different direction. It combines wave power with onboard AI chips and satellite-based results. It also depends on floating nodes that would need to operate far from the kind of support a normal data center gets. That is why the idea is getting attention. It is also why skepticism is fair.
FOX NEWS AI NEWSLETTER: SCAMMERS CAN EXPLOIT YOUR DATA FROM JUST 1 CHATGPT SEARCH
What AI data centers at sea mean for you
For now, this will not change how your phone or computer works. You will not suddenly see a “powered by ocean waves” label on your favorite AI app. But the bigger picture affects everyone. AI needs an incredible amount of electricity. As more companies add AI tools to their products, they need more places to run those systems. That pressure can affect energy grids, water use, local battles over new data centers and even your utility bills over time.
Panthalassa argues its approach could reduce the need for new data centers and power plants on land. That could ease pressure on local communities and the grid, but the company still has to prove the system can work reliably at sea. If ocean-based AI moves beyond testing, it could also raise fresh questions about marine maintenance, environmental oversight and who controls computing infrastructure in international waters.
Take my quiz: How safe is your online security?
Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaways
Everyone is using AI on their phones and computers these days, but the heavy lifting often happens in huge data centers behind the scenes. That is why Panthalassa’s ocean plan is getting attention. The company wants to use waves for power and seawater for cooling. The hard part is proving that floating AI nodes can survive rough seas, limited satellite links and complicated maintenance. If Panthalassa can pull it off, ocean-based AI could become part of the tech we use every day. If it cannot, it may show just how difficult it is to keep feeding AI’s growing demand for power.
If this kind of ocean-powered AI takes off, would you worry about what these floating nodes could mean for our oceans? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
OpenAI announced yet another reorganization Friday, consolidating certain areas and making company president Greg Brockman the official lead of all things product.
In a memo viewed by The Verge, Brockman wrote that since OpenAI’s product strategy for this year is to go all-in on AI agents, the company is combining its products to “invest in a single agentic platform and to merge ChatGPT and Codex into one unified agentic experience for all.”
To do this, the company is making a suite of org chart changes, although it’s still operating under some of the same ones from last month. That’s when AGI boss Fidji Simo went on medical leave and OpenAI announced that Brockman would be in charge of product strategy and CSO Jason Kwon, CFO Sarah Friar, and CRO Denise Dresser would take control of business operations.
It’s all part of OpenAI’s recent strategic shift to focus on key revenue drivers like coding and enterprise and stop pouring resources into “side quests” ahead of its potential IPO later this year and amid investor pressure to turn a profit.
In Simo’s continued absence, Brockman’s role leading product strategy is now official, as well as the company’s “scaling” arm. Under Brockman will be four different pillars. The first is core product and platform, led by Thibault Sottiaux, who has been OpenAI’s engineering lead for Codex, and the second is critical enterprise industries, led by ChatGPT head Nick Turley. Third is the consumer pillar, such as health, commerce, and personal finance, which will be led by Ashley Alexander, who has been its healthcare products VP. The fourth pillar — core infrastructure, ads, data science, and growth — will be led by Vijaye Raji, who has been OpenAI’s CTO of applications.
Brockman wrote in the memo that OpenAI’s goal is now to “bring agents to ChatGPT scale, in order to give individuals and organizations significantly more value and utility from our products.”
-
Missouri6 minutes agoMissouri consumers file class-action lawsuit against Good Day Farm
-
Montana12 minutes ago
Montana Lottery Mega Millions, Big Sky Bonus results for May 15, 2026
-
Nebraska18 minutes agoCornfield Baptism Near Omaha, Nebraska
-
Nevada24 minutes agoNevada Family Law Group’s Caston addresses separation risks after deadly Smith’s dispute
-
New Hampshire30 minutes ago5 Arrested On Charges Or Warrants At New Concord Coalition To End Homelessness Apartment Building
-
New Jersey36 minutes ago
PureCycle’s New Jersey Approval Links PureFive Resin To Revenue Potential
-
New Mexico42 minutes agoSwitchbacks face perfect test against New Mexico; Duke Lacroix to make club history at World Cup
-
North Carolina48 minutes agoEric Church delivers ‘greatest commencement speech ever’ in viral address to University of North Carolina graduates
