Amazon quietly patches ‘high severity’ Android photos app vulnerability

Researchers at cybersecurity firm Checkmarx said they discovered a bug in the app that allowed attackers to steal a user’s Amazon access token, which is used to authenticate someone across multiple Amazon APIs.