Security researchers have uncovered a vulnerability in Android smartphones that could allow an attacker to secretly take photos and record videos without any permissions being granted. And the exploit works even if the phone is locked or the screen turned off, or even during an actual call – all without the knowledge of the user, The researchers at Checkmarx discovered a way to circumvent the permission policy which normally provides a layer of protection for Android users from apps doing more than they should.

Read full article on Graham Cluley