Android 16 has a bug that lets apps route traffic outside your VPN tunnel and expose your real IP address, even with strict VPN settings enabled.

Google didn't fix an Android 16 flaw that can let malicious apps bypass VPN lockdown protections, but GrapheneOS has already patched it.

Google warns Android users about dangerous fake VPN apps hiding malware that steals passwords, banking details and personal data from phones and tablets.

Google updated the VPN by Google Quick Settings tile on Pixel phones, adding visible connection status that eliminates the need to open the app. The 2×1 tile now displays one of four statuses: ...