Android Ping!
Sadly the tone of the article is a little sensational, borderline shrill and light on details. The good news is, the chip maker and major phone companies have had the patch for a while. My Galaxy S5 isn't explicitly listed as one affected by this, though it does have a Qualcomm chipset. AT&T has sent out updates recently for it. There's a better article on this at ZDNet, more info, less panic.
Yet another example of why I keep nothing significant on my phone. No credit cards, bank info, nothing. The services such as Google that it connects to - I use different passwords for there than anything important. (like banking)