Nokia 9 PureView Fingerprint Scanner Bypassed using Chewing Gum Packet

Nokia released updates to fix Nokia 9 PureView’s unreliable in-display fingerprint sensor, but the update turns buggy.

After the update, multiple users complained that the phone can be bypassed now with an unregistered fingerprint or with a Chewing Gum Packet.

The Nokia 9 Fingerprint Scanner wasn’t reliable and the update was provided to address the scanner’s poor performance.

But the update results in the security flaw, which allows anyone to bypass the phone using a chewing gum packet, unregistered fingerprints, coin, and leather gloves.

Another user reported that flaw exists with Fingerprint Scanner, even before the update.

The latest update Pie Build v4.22C made the bug worse than it was, it allows strangers to bypass the phone.

We believe HMD will fix them right away, possibly the problem relies on the tweaked algorithm which unlocks the device if certain conditions are met.

In the meantime, users are recommended to use different authentication method such as PIN, password or facial recognition.

Earlier this month, a security flaw in Samsung’s Galaxy S10 ultrasonic biometric fingerprint scanner was bypassed by just having the duped 3D Printed Fingerprint of the mobile owner.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Android Security Update – Code Execution Flaw Let Hackers Control Your Android Device Remotely – Update Now

New Android Malware “BasBanke” Steal Financial Data Such as Credentials & Credit/Debit Card Numbers

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago