Since Android 12, your phone tells you when an app reads something you copied in another app. A developer has shown that an ordinary app can make that warning disappear.
Toni Noble, a software engineer, published the method on his blog on 13 November, together with the code of a test app. He had reported it to Google’s Android Vulnerability Reward Program in the summer.
On 12 November, the Android Security Team rated the issue Moderate and closed the report. It said the bug goes to the feature team for a possible future release, with no date and no further updates.
So for now, a password, a two-factor code or a wallet address you copy on Android can be read by the next app you open, and the one signal meant to tell you about it can be switched off by that same app.
Source: Privacy Affairs · 2026-11-13