A recent white paper reported an Autofill API vulnerability within Android's 8.0 Oreo release. The vulnerability comes via the ability for widgets to hide themselves from users and request information that users are unaware they are providing to the hidden widget. No public fixes have been issued.
In the wake of a scandal that has led to the biggest backlash it has ever faced, Facebook has announced API and platform product changes that will have far-reaching consequences for developers. The changes include the need for developers to submit their apps to Facebook for review.