From the BBC site.

http://www.bbc.co.uk/news/technology-13422308


Simple summary

Researchers have found that Android phones are potentially leaking data that, if stolen, could be used to get the information user store online.

Almost all versions of the Android operating system were passing round unencrypted authentication tokens, found the researchers. It was fixed in version 2.3.4 but, suggest Google figures, only 0.3% of Android phones are running this software.

There is no suggestion that attackers are exploiting the Android loophole at the moment.