Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

The Hacker News · Tuesday, 27 October 2026 at 12:09 (2h ago) · Original article ↗

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account.

Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update.

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Gadgets

New MacBook Pro redesign details revealed ahead of launch

Apple debuted a new M6 MacBook Pro today, but a high-end MacBook Pro redesign is coming tomorrow, and Mark Gurman has shared some new details to expect. more…

9to5Mac just now

Gadgets

Apple unveils new 14-inch MacBook Pro with M6 chip

The new MacBook Pro comes with 24 hours of battery life, and now features support for Wi-Fi 7 and Bluetooth 6 connectivity.

TechCrunch 6m ago

Gadgets

Everything Apple announced this week so far: New iPad and MacBooks

Ahead of its 'Pro and Tell' event, the company has already launched a few new devices.

Engadget 8m ago

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

More Gadgets & Mobile

New MacBook Pro redesign details revealed ahead of launch

Apple unveils new 14-inch MacBook Pro with M6 chip

Everything Apple announced this week so far: New iPad and MacBooks