Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

21 hours ago [email protected] (The Hacker News)
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens


Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim’s work account.

Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update.

In the researchers’ tests,

The post “Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: , , ,

More Stories

Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

2 hours ago [email protected] (The Hacker News)

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

19 hours ago [email protected] (The Hacker News)

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

21 hours ago [email protected] (The Hacker News)

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

24 hours ago [email protected] (The Hacker News)

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

1 day ago [email protected] (The Hacker News)

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

2 days ago [email protected] (The Hacker News)