Everybody without Android Oreo vulnerable to overlay attack

'Toast' micro-messages can burn just about every Android users

Any unpatched Android phone running a version older than Oreo is going to need patching fairly soon, with researchers turning up a class of vulnerability that lets malware draw fake dialogs so users "okay" their own pwnage."