Researchers from the Indian Institute of Information Technology at Hyderabad have identified a vulnerability in the autofill function of Android-based apps. Named AutoSpill, this flaw exposes login credentials to apps hosting web pages, potentially enabling malicious attacks. The researchers paper on AutoSpill has received the best paper award at the ACM Conference on Data and Application Security and Privacy.