Google Releases Free Android Upgrade To Millions: Samsung Galaxy Next
Samsung's Android 17 upgrade is coming to Galaxy phones via One UI 9. But the biggest feature, Gemini Intelligence, raises serious security questions. Here's what to know
Janhoi McGregor, Senior Contributor
Forbes
3 min read
6/10
Key Takeaways
Google released Android 17 on June 17, 2026, with Samsung rolling out One UI 9 starting with the Galaxy S24 series in South Korea and the US.
The flagship AI feature, Gemini Intelligence, requires permissions to access messages, location, and app activity, raising security concerns.
Security researchers at Black Hat 2026 demonstrated prompt injection attacks that could trick Gemini into leaking sensitive data.
Samsung ships over 250 million smartphones annually, meaning even a low exploit rate could impact millions of users.
The European Commission is investigating whether Gemini Intelligence complies with the EU AI Act's transparency obligations.
Samsung Galaxy users are about to get a major Android upgrade, but the headline AI feature—Gemini Intelligence—could expose millions to new security risks. Google has released Android 17 as a free update, and Samsung is rolling it out through One UI 9, beginning with the Galaxy S24 series. The update promises deeper AI integration, but cybersecurity experts warn that granting extensive system access to an AI assistant may create unforeseen vulnerabilities. Android 17 arrives six months after Android 16, marking an accelerated update cycle. Google claims Gemini Intelligence can handle tasks like summarizing notifications, controlling smart home devices, and even drafting emails without leaving the app you're in. But to do that, it needs broad permissions—access to messages, app activity, and location data. Samsung's One UI 9 skin adds its own layer of AI customization, including real-time translation and camera scene optimization. However, the combination of Google's Gemini and Samsung's AI tweaks could double the attack surface. Security researchers have already demonstrated potential exploits: a malicious app could trick Gemini into reading sensitive SMS codes or forwarding private emails. At the Black Hat conference last month, a team showed how prompt injection attacks could manipulate AI assistants on mobile devices. While Google and Samsung insist they've hardened the system against such threats, the speed of Android 17's rollout has some analysts concerned about insufficient testing. The update began rolling out globally on June 17, 2026, starting with carrier-unlocked Galaxy phones in South Korea and the United States. Other models—including the Galaxy Z Fold 6, Z Flip 6, and Galaxy A series—will follow over the next eight weeks. Google has also confirmed that the core Android 17 update will reach Pixel devices, but Samsung's One UI 9 version is the most widely anticipated because of its customizations. The security stakes are high: Samsung is the world's largest Android manufacturer, shipping over 250 million phones annually. Even a small exploit could affect tens of millions. "Every new permission granted to an AI system is a potential door for attackers," said Dr. Emily Tan, a cybersecurity researcher at MIT. The implications extend beyond phones. Gemini Intelligence could eventually integrate with Samsung's smart home appliances and health devices, amplifying the risk. Regulators in Europe are already examining whether AI assistants on phones violate the EU AI Act's transparency requirements. The European Commission has asked both Google and Samsung for documentation on how Gemini handles personal data. For now, Galaxy users face a choice: embrace the convenience of AI or disable Gemini Intelligence in the settings menu. Google has made the AI feature opt-in by default but users can turn it off under 'AI & Personalization' in the One UI settings. Security-conscious users should also review app permissions and consider using a VPN. The Android 17 update is rolling out automatically, but manual checks are available in Settings > Software Update. What happens next will be closely watched. If no major incidents emerge in the next 30 days, Google and Samsung will likely push deeper AI features in Android 18. But if a serious breach occurs, it could spark a regulatory crackdown and slow the industry's rush to embed AI everywhere. The battle between convenience and security is just getting started.
"Every new permission granted to an AI system is a potential door for attackers."
"The combination of Google's Gemini and Samsung's AI tweaks could double the attack surface."
Frequently Asked Questions
Gemini Intelligence is an AI assistant built into Android 17 that can summarize notifications, control smart home devices, and draft emails across apps. It requires broad system permissions to operate.
Because it accesses messages, location, and app activity, a malicious app could trick Gemini into leaking sensitive data through prompt injection attacks. Researchers have demonstrated such exploits.
The Galaxy S24 series is first, followed by Galaxy Z Fold 6, Z Flip 6, and Galaxy A series over eight weeks. Carrier-unlocked models in South Korea and US started on June 17, 2026.
Yes. Go to Settings > AI & Personalization and toggle off Gemini Intelligence. You can also review app permissions under Settings > Apps to limit what the AI can access.
Yes, the European Commission is requesting documentation from Google and Samsung on how Gemini Intelligence handles personal data to assess compliance with the EU AI Act.
Back up your data, review current app permissions, and consider disabling Gemini Intelligence after the update if you're concerned about privacy. Use a VPN and keep your device updated with security patches.