Today, Skype released a new version of the Skype for Android application containing a fix to the recent vulnerability reported last week.
Last week, a researcher discovered and shared the details of a vulnerability that stemmed from how Skype stores data, such as your contacts, profile, instant message logs, and more. The Skype application left these files completely unencrypted and with improper permissions, allowing anyone or any application to read them.
A Skype representative told SecurityWeek that they have not had any reports of 3rd party malicious applications misusing information from the Skype directory on Android devices. Skype said they will continue to monitor the situation closely.
Skype highly encourages users to download Skype only from skype.com, or from the Android Market links on skype.com.
