Straight from the horse's mouth:
HTC takes claims related to the security of our products very seriously. In our ongoing investigation into this recent claim, we have concluded that while this HTC software itself does no harm to customers' data, there is a vulnerability that could potentially be exploited by a malicious third-party application. A third party malware app exploiting this or any other vulnerability would potentially be acting in violation of civil and criminal laws. So far, we have not learned of any customers being affected in this way and would like to prevent it by making sure all customers are aware of this potential vulnerability.
HTC says that they are working on a security patch to resolve the issue. It will then need to be tested by HTC's carrier partners, such as Sprint, before being pushed out as an OTA (over the air) update. While we wait for the fix, HTC says that users should be careful when installing third party applications from unknown sources.
[Phone Scoop]
