Twitter has fixed a security vulnerability in the Twitter for Android app. The vulnerability could have allowed attackers to gain access to users’ private Twitter data. There is no evidence yet that the vulnerability was exploited by attackers. Twitter urges all Android users to update the app to the latest released version that fixes this vulnerability on all their devices. The issue did not impact Twitter for iOS or Twitter.com, the company added. U.S. Senator Ron Wyden tweeted that Twitter is working on end-to-end encrypted direct messages.
Source: https://www.bleepingcomputer.com/news/security/twitter-for-android-vulnerability-gave-access-to-direct-messages/