Billions of devices imperiled by new clickless Bluetooth attack (ars technica)

Just a note - it looks like Armis has provided an app to check if your particular phone is vulnerable - since the article was notably vague on what update would fix this. And the updates you do get, on Android, have always been a bit vague...

(The bluetooth process they exploited is launched by zygote - but I'm not sure if that's updated as part of a normal update, or an OTA firmware update??).

I'm running a self-purchased, unlocked Nexus 5X on T-Mobile, (pretty sure that means I get my updates from Google) and it hasn't been updated yet..