YOUR MOBILE PASSWORD MANAGER MIGHT BE EXPOSING YOUR CREDENTIALS

Summary from the TLDR InfoSec newsletter

Researchers from IIIT Hyderabad discovered a vulnerability that allows malicious apps to expose credentials when a user autofills with a password manager on Android. The attack involves tricking password managers into autofilling into the app as well as a Login with Google WebView.