Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

The Hacker News - Oct 27, 2026

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,

Read full article

More News

Still Surge

Let your "surge" of emotions burst forth when reading the news articles acknowledging the beauty and vastness of Science and futuristic Technologies.

NEWSLETTER