Security Start-Up, University Team On Android Patch App

The article describes the Android "Master Key" application-signing vulnerability that allows modification of legitimate signed apps without breaking their cryptographic signature, the availability of Google’s patch, and the release of a third-party in-memory patching tool called ReKey by Duo Security and Northeastern University to protect unpatched devices amid widespread OEM/carrier update delays and publication of proof-of-concept exploit code.