Critical Microsoft Authenticator flaw let malicious Android apps steal account access

Authenticator was granting session tokens left and right, but the bug has now been fixed.
The Hacker News

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...

Is Microsoft Authenticator (Android) safe? A vulnerability that hands over work account 'passes' to malicious apps. Fixed in version 6.2606.4246 and later

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...
Windows Report on MSN

Microsoft Authenticator’s AuthMask vulnerability let malicious Android apps steal corporate tokens; now patched

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...
The Hacker News

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

NebuSec demonstrated code execution through an answered Telegram for Android voice call; the flaw was fixed in version ...
ZDNet

This new Android exploit can steal everything on your screen – even 2FA codes

Pixnapping begins when a victim unknowingly installs a malicious app on their Google or Samsung phone. A new attack method demonstrated by researchers could lead to the theft of two-factor ...
BetaNews

Microsoft patches high severity flaw in Authenticator for Android

Microsoft has patched a high severity security issue in Microsoft Authenticator for Android. Tracked as CVE-2026-80097, the ...