Android users have just been given another urgent reason to update their phones, with the US government’s cybersecurity agency warning that a vulnerability newly disclosed by Google is under attack.