This Android vulnerability can break your lock screen in under 60 seconds

A critical vulnerability (CVE-2026-20435) in MediaTek system-on-a-chip devices using Trustonic's Trusted Execution Environment allows an attacker with physical USB access to extract root keys before Android boots, recover the handset PIN, decrypt full-disk storage, and extract wallet seed phrases; researchers demonstrated the exploit, MediaTek published a firmware patch, and users are advised to install vendor updates or otherwise protect devices from loss or theft.