Samsung just released a security update for the Galaxy Z Fold 7 and Flip 7 that patches 65 vulnerabilities in the US. On the surface, that sounds like good news. A company proactively fixing security flaws? The kind of thing we’re supposed to celebrate. But before we pop the champagne, let’s ask some harder questions. What were these vulnerabilities? How long had they been sitting in the wild? And why are we only hearing about this now?
The Numbers Game

Sixty-five vulnerabilities is a lot. It’s also a conveniently round number, which makes me wonder what Samsung’s actually counting here. Are these critical security flaws that could expose your banking information? Or are they minor issues that would take a sophisticated attack to exploit? The company’s official statements tend to lump everything together into one big scary figure, which tells us surprisingly little about what we’re actually dealing with.
This is a pattern I’ve noticed across the tech industry. When companies announce security patches, they’re often vague about severity. A vulnerability that lets someone access your location data gets the same headline treatment as a flaw that would require physical access to your device to exploit. Both technically matter, but they’re not the same risk.
The real question is: how many of these 65 were actually dangerous to the average user? Samsung hasn’t broken down the severity levels in any detail, which is frustrating. Transparency is what builds trust, and vague patch notes don’t do that.
The Timeline Problem
Here’s what I really want to know: when did Samsung discover these vulnerabilities? Were they found internally during routine security audits? Did external researchers report them? Or did the company only notice them after they’d been exploited in the wild?
The March 2026 update suggests these fixes came out several months into the Z Fold 7 and Flip 7’s lifecycle. That’s not unreasonable—these devices have been on the market for a while by then. But it raises another question: how many of these flaws existed at launch? And if Samsung knew about them, why weren’t they fixed before the devices shipped?
Device security is a shared responsibility. Manufacturers need to release updates regularly, sure. But they also need to think seriously about what ships in the first place. A security update that patches vulnerabilities present from day one isn’t quite the same as a company getting ahead of emerging threats.
What This Means for Foldable Users
Foldable phones like the Z Fold and Flip occupy an interesting space in the security conversation. They’re premium devices with higher price tags and more complex hardware. That complexity—the multiple displays, the hinge mechanism, the additional sensors—potentially creates more attack surface for hackers to work with.
Samsung’s foldables are also in the hands of business users and high-net-worth individuals who might be attractive targets. If even one of these 65 vulnerabilities affected things like secure folder access or authentication systems, that would be genuinely serious.
The company does deserve credit for releasing security updates regularly. Samsung’s actually one of the better manufacturers when it comes to ongoing support and patch frequency. But that shouldn’t stop us from asking whether the initial security posture of these devices was solid enough to begin with.
The Bigger Picture
This update is a reminder that no device is ever truly “finished” when it ships. Technology companies release products knowing they’ll need patches. That’s just reality now. What matters is how they handle it—whether they’re transparent about what they’re fixing and whether they’re fixing things quickly when they discover them.
Samsung gets points for action here. They released the patches, they’re offering security updates to users, and the Z Fold and Flip lines are getting support. That’s better than a lot of manufacturers manage. But we shouldn’t mistake regular maintenance for a sign that everything’s secure. These 65 vulnerabilities existed in the first place. That’s the part worth thinking about.
Source: Galaxy Z Fold 7 & Flip 7: March 2026 update fixes 65 vulnerabilities in the US