Android flaw lets attack code slip into signed apps

Janus bug leaves APKs vulnerable to poisoning

Researchers say a recently-patched vulnerability in Android could leave users vulnerable to attack from signed apps."