Until recently, Google’s namesake Android app, which more than five billion installs to date, had a vulnerability that could have allowed an attacker to quietly steal personal data from a victim’s device. Sergey Toshin, founder of mobile app security startup Oversecured, said in a blog post that the vulnerability has to do with how the Google app relies on code that is not bundled with the app itself.

Read full article on TechCrunch