A new chapter for Galaxy: what Samsung actually announced at Unpacked 2026

Samsung's Unpacked on February 25, 2026 landed like a weather front for mobile tech — not a single dramatic lightning strike, but a sweep of changes that together reframe what a smartphone can do. From the S26 Ultra's built-in Privacy Display to earbuds that talk back to AI and “agentic” assistants that act for you, this event wasn't just about specs. It was about shifting phones from reactive tools into proactive partners.

Below I break down the headlines, give the context you need, and share what the changes mean for privacy, daily workflows, and whether it's worth upgrading.

Quick snapshot

• Event date: February 25, 2026 (Galaxy Unpacked, San Francisco).
• Ships: Galaxy S26 series and Galaxy Buds4 line are slated to be available from March 11, 2026.
• Themes: agentic AI (phones acting on your behalf), hardware privacy (Privacy Display), camera and performance refinements, and refreshed earbuds with tighter AI integration.

What matters most right now

• Privacy Display: a hardware-layer privacy solution built into the S26 Ultra’s OLED that limits side viewing — useful in crowded places and for safeguarding on-screen data.
• Agentic AI: Samsung positions Galaxy AI as more than assistants that answer questions; it will proactively perform tasks, leverage on-device Personal Data Engine (PDE), and work with partners like Google (Gemini) and Perplexity.
• Buds4 and Buds4 Pro: redesigned earbuds with improved audio, new gesture and head controls, and closer integration with Galaxy AI.
• Pricing and release: preorders opened after Unpacked; S26 series ships March 11, 2026 with U.S. pricing shifts (S26 and S26+ up $100 vs. predecessors; Ultra holds at $1,299 in the U.S., per reporting).

A few high-level takeaways

• Privacy and AI are front-and-center, not afterthoughts.
• Samsung is treating AI as infrastructure — deeply embedded, cross-device, and designed to act for you.
• Hardware innovations (display tech, thermal design) support those AI ambitions by enabling sustained on-device processing.
• The product lineup is evolutionary in many specs, but the platform changes (PDE, agentic features) create new user scenarios that may drive upgrades.

The Galaxy S26 series: subtle redesigns, big platform bets

• Design and performance:
  • The S26 Ultra swaps titanium for lighter aluminum for better thermal control and adds a larger vapor chamber; Samsung claims significant NPU and CPU improvements for the Ultra’s custom AP. These changes are meant to sustain AI-heavy workloads on-device.
• Cameras and displays:
  • Improvements in apertures, image processing, and a 200 MP main sensor on the Ultra continue Samsung’s push on computational photography. The Ultra keeps flagship camera capabilities (including 8K options) while adding a display technology that’s the real eye-catcher this year.
• Privacy Display (S26 Ultra headline):
  • This is a display-integrated approach to “shoulder surfing”: when enabled the screen remains clear for the person directly in front of it but darkens or blacks out when viewed from the side. You can configure it per app or area (notifications/passwords), and there’s a “Maximum Privacy Protection” mode for especially sensitive content.
  • Importantly, this is hardware-level masking integrated into the OLED panel rather than a simple software filter — which reduces the chance of easy circumvention and preserves front-view clarity.
• Pricing and availability:
  • Preorders followed Unpacked and shipping begins March 11, 2026. U.S. pricing shows S26 and S26+ up about $100 versus last year, while the Ultra stays around $1,299 (regional prices vary).

Why this matters: Samsung is answering two real user pain points — public privacy and AI usefulness — with hardware plus platform improvements. That combination is more compelling than incremental megapixel or battery gains alone.

Agentic AI: a phone that does more than answer

• Agentic AI concept:
  • Samsung framed agentic AI as the phone taking action on your behalf: scheduling, summarizing conversations, searching and even completing tasks (via partnerships and Google Labs previews of Gemini 3).
• Personal Data Engine (PDE) and security:
  • The PDE organizes on-device data so AI can use context sensibly, and Knox/KEEP/Knox Vault aim to isolate and protect that data. Samsung emphasizes that privacy/security sit at the architecture level.
• Partners and assistants:
  • Galaxy devices will ship with multiple AI assistants available: Bixby, Google’s Gemini, and Perplexity (with “Hey Plex” wake-word support for Perplexity features).
• Day-to-day features:
  • Examples shown include contextual nudges during chats (Now Nudge), natural-language photo edits (Photo Assist), multi-object Circle to Search, call screening and summaries, and proactive document scanning/cleanup.

Why this matters: agentic features are a step beyond voice queries. If executed well and securely, they could reduce friction — fewer taps, fewer app switches. The risk is user trust: people will need to feel confident the AI acts correctly and respects privacy boundaries.

Galaxy Buds4 and Buds4 Pro: tighter audio and smarter ears

• Design and hardware:
  • A refreshed “blade” look, smaller earbud heads, IP54/IP57 dust-water ratings, and an 11 mm wide woofer in the Pro that increases speaker area and bass response.
• AI and safety features:
  • Super Clear call quality, better ANC, siren detection that boosts ambient awareness, and head gesture controls for hands-free interactions.
• Integration:
  • Deep integration with Galaxy AI and multi-assistant voice control means the earbuds become more than audio peripherals — they’re conversational endpoints and modes of invoking assistants.

Why this matters: earbuds are now an important interface for agentic AI. Improvements in call clarity and environmental awareness fit a world where voice and context increasingly drive interactions.

The privacy and ethics question

• Hardware privacy vs. software privacy:
  • The Privacy Display protects visual eavesdropping, but it doesn't (and can't) address data collection, profiling, or how AI services handle information. Samsung’s architectural protections (PDE, KEEP) are meaningful, but trust depends on transparent policies and implementation details.
• Agentic risks:
  • When AI acts for you, mistakes can multiply. Mis-scheduled meetings, incorrect actions, or poor judgment in sensitive contexts are real concerns. User control, clear undo/consent flows, and conservative defaults will be crucial.
• Ecosystem complexity:
  • Multiple assistants (Bixby, Gemini, Perplexity) increase choice but also fragmentation and potential confusion. How Samsung surfaces which assistant is acting — and how data is shared between them — will affect adoption.

My take

Samsung didn’t just refresh a spec sheet at Unpacked 2026 — it laid foundational pieces for phones that act. The Privacy Display is a smart, tangible response to a mundane yet widespread annoyance (shoulder-surfing), and the agentic AI push is the kind of platform-level ambition needed to make mobile AI meaningfully useful. That said, agentic AI’s success will depend on careful rollout: predictable behavior, robust privacy controls, and sensible defaults.

If you’re someone who uses a phone for work, reads sensitive content in public, or loves productivity shortcuts, the S26 Ultra’s mix of hardware privacy and agentic AI previews is compelling. If you’re more conservative about AI acting on your behalf, watch for early user reports about accuracy, transparency, and how personal data is handled before committing.

Sources

• Samsung Newsroom — Galaxy Unpacked 2026 highlights.
  https://news.samsung.com/global/galaxy-unpacked-2026-highlights-from-galaxy-unpacked-the-beginning-of-truly-agentic-ai

• Associated Press — Samsung rolls out more AI, new privacy shield mode with the new Galaxy S26 lineup. (Published Feb 2026.)
  https://apnews.com/article/b23e8c9c51c2d09e772fe8709b867ca7

• TechCrunch — Everything announced at Samsung's Galaxy Unpacked event, including S26 smartphones, privacy screen, and more.
  https://techcrunch.com/2026/02/26/everything-samsung-announced-at-samsungs-galaxy-unpacked-event-including-s26-smartphones-privacy-screen-and-more/

• Wired — Everything Samsung Announced at Galaxy Unpacked 2026.
  https://www.wired.com/story/samsung-galaxy-s26-series-galaxy-unpacked

• Samsung for Business — Galaxy Unpacked February 2026 — Full replay and highlights.
  https://insights.samsung.com/2026/02/25/samsung-unpacked-february-2026-full-replay-and-highlights/

Android malware just learned to ask for directions — from Gemini

A new strain of Android spyware called PromptSpy has put a chill in the security world by doing something we’ve only warned about in hypotheticals: it queries a large language model at runtime to decide what to do next. Instead of relying solely on brittle, hardcoded scripts that break across phone models and launchers, PromptSpy asks Google’s Gemini to interpret what’s on the screen and return step-by-step gestures to keep itself running and hard to remove.

It sounds like sci‑fi. It’s real. And even if this particular sample looks like a limited proof of concept, the implications are worth taking seriously.

Why this matters

• PromptSpy is the first reported Android malware to integrate generative AI into its execution flow. That means an attacker can outsource part of the “how” to a model that understands language and UI descriptions, rather than trying to write brittle device‑specific navigation code. (globenewswire.com)
• The malware uses Gemini to analyze an XML “dump” of the screen (UI element labels, class names, coordinates) and asks the model how to perform gestures (taps, swipes, long presses) to, for example, pin the malicious app in the Recent Apps list so it can’t be easily swiped away. That persistence trick — paired with accessibility abuse and a VNC module — turns a compromised phone into a remotely controllable device. (globenewswire.com)
• This isn’t yet a massive outbreak. ESET’s initial research and telemetry don’t show widespread infections; distribution appears to be via a malicious domain and sideloaded APKs (not Google Play). Still, the technique expands the attacker toolbox. (globenewswire.com)

The anatomy of PromptSpy (plain English)

• The app arrives outside the Play Store (phishing / fake bank site distribution).
• It requests Accessibility permissions — that’s the red flag to watch for. With those permissions it can read UI elements and simulate touches.
• PromptSpy captures an XML snapshot of what’s on screen and sends that, with a natural-language prompt, to Gemini.
• Gemini returns structured instructions (JSON) with coordinates and gesture types.
• The malware repeats the loop until Gemini confirms the desired state (e.g., the app is locked in the Recent Apps view).
• Meanwhile it can deploy a built-in VNC server to let operators observe and control the device, capture screenshots and video, and block uninstallation via invisible overlays. (globenewswire.com)

What the vendors are saying

• ESET, which discovered PromptSpy, named and analyzed the family and warned about the adaptability that generative AI brings to UI-driven malware. They emphasized that the Gemini component was used for a narrow but strategic purpose — persistence — and that the model and prompts were hard-coded into the sample. (globenewswire.com)
• Google has noted that devices with Google Play Protect enabled are protected from known PromptSpy variants, and that the malware has not been observed in the Play Store. Google and other platforms are already using AI in defensive workflows, and Play Protect flagged the known samples. That said, the prescriptive takeaway from Google and researchers is: don’t sideload unknown apps and be suspicious of Accessibility requests. (helentech.jp)
• Security teams have previously shown LLMs can be “prompted” into unsafe actions (so‑called prompt‑exploitation), and other threat research has already demonstrated experiments where malware queries LLMs for obfuscation or evasion tactics. PromptSpy is the first high‑profile example of a mobile threat using a model to make runtime UI decisions. (cloud.google.com)

Practical advice for users and admins

• Treat Accessibility permission requests as extremely sensitive. Only grant them to well-known, trusted apps that explicitly need them (e.g., assistive tools you intentionally installed). PromptSpy relies on Accessibility abuse to operate. (globenewswire.com)
• Keep Play Protect enabled and your device updated. Google says Play Protect detects known PromptSpy variants and the sample was not found in Google Play — meaning the main exposure vector is sideloading. (helentech.jp)
• Don’t install APKs from untrusted websites. Even a convincing “bank app” landing page can be a trap.
• If you suspect infection: reboot to Safe Mode (which disables third‑party apps) and uninstall the suspicious app from Settings → Apps. If removal is blocked, Safe Mode should allow you to remove it. (globenewswire.com)
• Enterprises should monitor for unusual Accessibility API usage and VNC‑like activity, and enforce app installation policies that block sideloading where possible.

Bigger picture: a step change in attacker workflows

PromptSpy is not a finished army of super‑malware; it’s an inflection point. A few things to keep in mind:

• Outsourcing UI logic to an LLM lowers the development cost and time for attackers who want their malware to work across many devices and OEM interfaces. That expands the potential victim pool without requiring extensive per‑device engineering. (globenewswire.com)
• Right now the model and prompts were embedded in the sample, not letting the attacker dynamically reprogram behavior on the fly. But as attackers iterate, we can expect more dynamic patterns: just‑in‑time code snippets, adaptive obfuscation, or model‑assisted social engineering. (globenewswire.com)
• Defenders are also using AI. Google and other vendors are integrating generative models into detection and app review. That creates an arms race where models will be used on both sides — but history shows defensive systems must evolve faster than attackers to keep users safe. (tech.yahoo.com)

My take

PromptSpy should be a wake‑up call, not a panic button. The malware demonstrates a plausible and worrying technique — using an LLM to adapt UI interactions in the wild — but it also highlights where traditional defenses still work: cautious app sourcing, permission hygiene, Play Protect and safe removal procedures. The bigger risk is what comes next, not this single sample: models make it easier to automate tasks that were once fiddly and fragile. Expect attackers to test and reuse these ideas, and expect defenders to double down on detecting model‑assisted behavior.

Security in an era of ubiquitous generative AI is going to be a cat‑and‑mouse game where the mice learned to read maps. Keep your guard up.

Readable summary

• PromptSpy is the first widely reported Android malware to query a generative model (Gemini) at runtime to adapt UI actions for persistence. (globenewswire.com)
• It relies on Accessibility abuse, has a VNC component, and was distributed outside the Play Store. Play Protect reportedly detects known variants. (globenewswire.com)
• Protect yourself by avoiding sideloads, rejecting suspicious Accessibility requests, keeping Play Protect and updates enabled, and using Safe Mode removal if needed. (globenewswire.com)

Sources

• ESET Research discovers PromptSpy, the first Android threat to use generative AI — ESET press release.
  https://www.globenewswire.com/news-release/2026/02/19/3241357/0/en/ESET-Research-discovers-PromptSpy-the-first-Android-threat-to-use-generative-AI.html

• Android malware is now using Google’s own Gemini AI to adapt in real time — Android Authority.
  https://www.androidauthority.com/android-malware-promptspy-uses-generative-ai-gemini-3642832/

• PromptSpy Android malware abuses Google Gemini AI for persistence — CyberInsider (technical breakdown).
  https://cyberinsider.com/promptspy-android-malware-abuses-google-gemini-ai-for-persistence/

• Google says its AI systems helped deter Play Store malware in 2025 — reporting on Play Protect and Google’s stance.
  https://tech.yahoo.com/ai/gemini/articles/google-says-ai-systems-helped-212739930.html

• GTIG AI Threat Tracker: Experimental malware using Gemini for self‑modification — Google Cloud blog (background on LLMs being experimented with in malware).
  https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools

Google I/O 2026 is locked in for May 19–20 — and AI will take center stage

Mark your calendars: Google I/O 2026 will run May 19–20, 2026, at Shoreline Amphitheatre in Mountain View, California — with the full program also livestreamed online. The company says this year’s event will spotlight the “latest AI breakthroughs” and product updates across Gemini, Android and more. (blog.google)

Why this matters now

Google I/O has long been the place where Google sets the tone for the next year of software, developer tools, and sometimes hardware. After a string of AI-first announcements in recent years — from tighter assistant integrations to model-led creativity tools — this year looks like another inflection point where Gemini and Android take center stage. Expect the usual mix of big-keynote product visions, developer-focused sessions, and demos that preview what millions of users will actually see on their phones, laptops and services. (theverge.com)

Quick overview

• Dates: May 19–20, 2026 (keynote typically opens the morning of May 19). (blog.google)
• Location: Shoreline Amphitheatre, Mountain View, California — and livestreamed at io.google. (blog.google)
• Focus: AI (Gemini), Android, Chrome/ChromeOS, developer tooling, and product integrations. (theverge.com)

What to watch for (the things that could actually move the needle)

• Gemini’s next act
  Google has been rolling Gemini into search, Workspace and developer tools. At I/O, expect deeper product integrations and potentially new capabilities that make Gemini a core layer powering user-facing features rather than an experimental add-on. That could include richer multimodal features, better context-aware assistance, or tooling aimed squarely at developers. (theverge.com)

• Android 17 and platform polish
  Android 17 is already in early beta; I/O is a natural point to show off consumer-facing features, APIs for OEMs and developers, and how Android will lean on AI (for privacy-preserving on-device processing, smarter sensors, or new UX paradigms). Expect demos that tie Android behavior to Gemini-style models. (tomsguide.com)

• XR and cross-device threads
  Google has been hinting at Android XR and broader multi-device OS work (rumors around an “Aluminium OS” or simplified cross-device experiences keep resurfacing). I/O could be where the company ties AR/VR, wearables, phones and Chromebooks together with AI glue. Even a teaser for new hardware partnerships or SDKs would be strategically meaningful. (techradar.com)

• Developer tools, ethics and controls
  As AI features proliferate, expect new SDKs, API changes, and discussion of responsible deployment — both to help developers build faster and to address the regulatory/ethical questions that follow model-driven products. I/O is as much about getting developers the tools as it is about dazzling headlines. (blog.google)

What I/O probably won’t do

• Major surprise hardware spectacle
  I/O often teases hardware, but full product launches (a flagship Pixel phone, for example) are less predictable. This year’s framing on “breakthroughs” across software and AI suggests Google’s emphasis will be on models, APIs and services — though small hardware reveals or partner demos are possible. (theverge.com)

The bigger picture: why Google keeps pushing AI into everything

Google sits at the intersection of search, mobile OS, cloud, and major consumer apps. Stitching Gemini across those layers lets Google offer richer experiences (and retain user attention) while creating new developer hooks. That ambition creates friction with competitors and regulators, but it also shapes how products will evolve: less siloed apps, more assistant-driven flows, and a split between on-device models and cloud-scale capabilities. I/O is where those directions are explained and where developers get the tools to follow them. (theverge.com)

What to do if you care (practical next steps)

• Save the dates: May 19–20, 2026. Register on io.google if you want livestream access or developer sessions. (blog.google)
• Watch keynote timing on May 19 — that’s where the biggest product narratives will land. (tomsguide.com)
• If you’re a developer or product person, keep an eye on new SDK announcements and privacy/usage docs — those determine how quickly you can adopt the new AI features. (blog.google)

Final thoughts

Google I/O 2026 looks like another step in the company’s long game: bake AI into the plumbing of products and hand developers the keys to build with it. Whether Gemini becomes the connective tissue users actually notice (and prefer) depends on execution — latency, privacy, and usefulness will decide adoption more than flashy demos. If you’re curious about where mainstream AI experiences are headed, May 19–20 is shaping up to be one of the clearest signals we’ll get this year. (theverge.com)

Sources

• Google Developers Blog — "Google I/O 2026: Save the date!"
  https://blog.google/innovation-and-ai/technology/developers-tools/io-2026-save-the-date/ (blog.google)

• The Verge — "Google announces dates for I/O 2026"
  https://www.theverge.com/tech/880401/google-io-2026-dates-ai (theverge.com)

• TechRadar — "Google I/O 2026 is official: here are 5 things to expect"
  https://www.techradar.com/phones/android/google-i-o-2026-is-official-here-are-5-things-to-expect (techradar.com)

• Tom's Guide — "Google I/O 2026 officially kicks off in May: here's when and what we expect to see"
  https://www.tomsguide.com/phones/google-pixel-phones/google-i-o-2026-officially-kicks-off-in-may-heres-when-and-what-we-expect-to-see (tomsguide.com)