Article
Cyber News / Article / Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
in
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,
Related articles
in
[email protected] (The Hacker News)TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
6 days ago
in
[email protected] (The Hacker News)WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
6 days ago
in
[email protected] (The Hacker News)Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
6 days ago
You might Also like
Gu
Guru Baran-4 days ago
FBI Confirms North Korean Hackers Responsible for $6 Billion+ Binance Attack
Gu
Guru Baran-4 days ago
Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More
La
Lawrence Abrams-5 days ago
