logo

Google fixing Android lock screen bug that lets Gemini send SMS without a PIN

ID: 231e4d38-deb0-5b64-8952-c9c62f5a5bda

STIX ID: report--231e4d38-deb0-5b64-8952-c9c62f5a5bda

Feed Name: The Register (Security)

Threat Score
50/100

Date Published: 2026-07-17

Date Updated: 2026-07-23

...
...

A multi-touch gesture on Android 16 devices with Gemini enabled can bypass the lock-screen authentication prompt, allowing an attacker with physical access to send SMS and WhatsApp messages and to re-enable app access via Gemini without entering the device PIN; Google has acknowledged the issue and rolled out a fix this week.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.