{"id":53811,"date":"2026-06-15T20:15:08","date_gmt":"2026-06-15T20:15:08","guid":{"rendered":"https:\/\/www.europesays.com\/korea\/53811\/"},"modified":"2026-06-15T20:15:08","modified_gmt":"2026-06-15T20:15:08","slug":"samsung-just-gave-hackers-a-roadmap-update-your-galaxy-now","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/korea\/53811\/","title":{"rendered":"Samsung Just Gave Hackers A Roadmap: Update Your Galaxy Now"},"content":{"rendered":"

On top of rolling out new AI tools and features to millions of Galaxy phones via One UI 8.5 <\/a>and the One UI 9 beta, Samsung has released its June 2026 security update that patches up to 45 vulnerabilities across Galaxy devices running Android 14, 15 and 16. <\/p>\n

This is alongside bringing some new Galaxy S26 features to the Galaxy S25 with the update<\/a>. The patch fixes a real \u201clocal attacker\u201d exploit and a handful of other security issues that are absolutely worth your attention.<\/p>\n

Read on for more and don\u2019t forget to subscribe to my newsletter for more Samsung news and deal updates<\/a>. <\/p>\n

Samsung’s One UI 8.5 June Update Patches A “Local Attacker” Exploit \"Samsung<\/p>\n

The Samsung Galaxy S25 Ultra is in line for the June One UI 8.5 update. (Photo by Firdous Nazir\/NurPhoto via Getty Images)<\/p>\n

NurPhoto via Getty Images<\/p>\n

Among the Samsung-specific One UI 8.5 June patches this month are fixes for bugs in the Galaxy\u2019s photo editing tools, audio system, messaging settings and deep settings. Each involves what Samsung classifies as a “local attacker” exploit.<\/p>\n

A local attacker isn\u2019t someone breaking into your phone remotely from across the internet. It means someone who already has a foot in the door, either through a dodgy app already running on the device, or through physical access to the phone itself. <\/p>\n

A malicious app is the more common version of a local attacker exploit. These are usually sideloaded from outside the Google Play Store or one that slipped past Play Protect. <\/p>\n

“The everyday one is malicious code already running on the phone,” Shahak Shalev, Global Head of AI and Scam Research at Malwarebytes, told me. “A user gets tricked into installing a sketchy app beforehand\u2026and that app uses a bug like this to break out of its sandbox and grab privileges it was never supposed to have.”<\/p>\n

The other form is someone who has your phone in their hands. That could be a repair technician with unsupervised access, or simply someone picking up your unlocked phone while you\u2019re not looking. Make sure you turn on the privacy screen feature if you have a Galaxy S26 Ultra<\/a> so your unlock password isn\u2019t visible to others.<\/p>\n

Why You Should Install The June One UI 8.5 Update Now<\/p>\n

The moment Samsung publishes a patch like this, a clock starts for anyone who delays updating.<\/p>\n

“Some bad actors actually wait for these updates to drop, then compare the patch to reverse-engineer the very bug that just got fixed, so they can jump on people who haven’t updated yet,” Shalev told me.<\/p>\n

This creates a so-called “n-day” or “1-day” exploit, which is a working attack built directly from the public fix, aimed squarely at anyone still running the unpatched version. <\/p>\n

The good news is that these are local vulnerabilities and nobody is hacking your phone miles away. But the window between a published patch and hackers trying their luck on your device can be short. Updating fast is the one thing that fully protects your Galaxy entirely.<\/p>\n

With that said, Malwarebytes confirmed it is not aware of any active campaign exploiting these specific vulnerabilities in the wild yet. But that doesn\u2019t mean you shouldn\u2019t follow basic security practices, or delay updating. <\/p>\n

“The boring fundamentals are what keep you safe: stick to official app stores, be skeptical about sideloading APKs from random links, keep an eye on the permissions your apps are asking for, and\u2026install your security updates promptly,” Shalev said.<\/p>\n

How To Install The June One UI 8.5 Update<\/p>\n

Samsung started rolling out the June patch on the 10th, beginning with the Galaxy S26 series in South Korea. The rollout has since expanded to the S25 series, S25 FE, S25 Edge, Z Fold 7, Z Flip 7, Z Flip 7 FE and Z Tri Fold, according to SammyFans<\/a>. <\/p>\n

As of today, June 15th, Samsung update tracker Tarun Vats<\/a> confirmed the June update is now live for Galaxy S25 and S26 series users in Europe and India. The S24 series and older flagships are expected to follow shortly.<\/p>\n

To check for the One UI 8.5 June update, go to settings > software update > download and install. It\u2019s worth noting that availability depends on individual device support lifecycles. So if your Galaxy is no longer receiving security updates, this month\u2019s patch may not be available for your phone and that means it’s time to upgrade<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"On top of rolling out new AI tools and features to millions of Galaxy phones via One UI…\n","protected":false},"author":2,"featured_media":53812,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[4336,5462,4338,127,30717,30715,13602,8033,30714,223,30716],"class_list":["post-53811","post","type-post","status-publish","format-standard","has-post-thumbnail","category-samsung","tag-galaxy-s25","tag-galaxy-s26","tag-one-ui-8-5","tag-samsung","tag-samsung-galaxy-s25-beta-testing","tag-samsung-galaxy-s25-software-update","tag-samsung-galaxy-s25-ultra","tag-samsung-galaxy-s26-ultra","tag-samsung-galaxy-watch-security-update","tag-samsung-group","tag-samsung-s25-ai-features"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts\/53811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/comments?post=53811"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts\/53811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/media\/53812"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/media?parent=53811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/categories?post=53811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/tags?post=53811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}