49
Hackers can steal 2FA codes and private messages from Android phones
(arstechnica.com)
This is a most excellent place for technology news and articles.
Not sure. Google patched it by just limiting the amount of blurs an app could request: https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6