Oct 152025 New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions Pixnapping side-channel can steal 2FA codes pixel-by-pixel on Android 13–16; CVE-2025–48561 patched Sept 2025 but workaround exists.