importantSYS.SOURCE: thehackernews.com• 2026-10-27T17:39:50+05:30

Microsoft Authenticator Vulnerability Allows Unauthorized Android Apps to Harvest Work Account Tokens

#microsoft #android #vulnerability #authentication #tokens

A vulnerability in Microsoft Authenticator for Android allowed unprivileged malicious apps to impersonate trusted Microsoft services and steal work account tokens. The flaw, tracked as CVE-2026-80097, was resolved in version 6.2606.4246.

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account.

Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update.

In the researchers' tests,

Read original article

*** END OF TRANSMISSION ***

> META AI DIRECTOR ROHIT PATEL LAUNCHES NDOC TO CHALLENGE MICROSOFT OFFICE AND GOOGLE WORKSPACE > FORD FATHOM EV TO OFFER HOME POWERING CAPABILITIES AT LOWER COST > US GOVERNMENT WARNS OF ACTIVE EXPLOITATION OF CRITICAL PHP VULNERABILITIES > APPLE LAUNCHES 14-INCH MACBOOK PRO FEATURING M6 CHIP WITH ENHANCED PERFORMANCE AND CONNECTIVITY > APPLE RELEASES IOS 27.2 WITH ENHANCED SIRI AI LANGUAGES AND CRITICAL SECURITY PATCHES > GMO INTERNET CONFIRMS DATA BREACH INVOLVING STOLEN CUSTOMER INFORMATION > PALMER LUCKEY REFUSES TO LEAVE CALIFORNIA DESPITE PROPOSED WEALTH TAX > ANDURIL AND QUALCOMM UNVEIL BLUECHIP: A U.S.-MADE HARDENED LAPTOP WITH DOMESTIC SUPPLY CHAIN > GENERAL COMPUTE SECURES $100M SERIES A FUNDING AMID NEOCLOUD MARKET VOLATILITY > OPERA LAUNCHES WEBAI STANDARD FOR LOCAL BROWSER-BASED AI DEPLOYMENT> META AI DIRECTOR ROHIT PATEL LAUNCHES NDOC TO CHALLENGE MICROSOFT OFFICE AND GOOGLE WORKSPACE > FORD FATHOM EV TO OFFER HOME POWERING CAPABILITIES AT LOWER COST > US GOVERNMENT WARNS OF ACTIVE EXPLOITATION OF CRITICAL PHP VULNERABILITIES > APPLE LAUNCHES 14-INCH MACBOOK PRO FEATURING M6 CHIP WITH ENHANCED PERFORMANCE AND CONNECTIVITY > APPLE RELEASES IOS 27.2 WITH ENHANCED SIRI AI LANGUAGES AND CRITICAL SECURITY PATCHES > GMO INTERNET CONFIRMS DATA BREACH INVOLVING STOLEN CUSTOMER INFORMATION > PALMER LUCKEY REFUSES TO LEAVE CALIFORNIA DESPITE PROPOSED WEALTH TAX > ANDURIL AND QUALCOMM UNVEIL BLUECHIP: A U.S.-MADE HARDENED LAPTOP WITH DOMESTIC SUPPLY CHAIN > GENERAL COMPUTE SECURES $100M SERIES A FUNDING AMID NEOCLOUD MARKET VOLATILITY > OPERA LAUNCHES WEBAI STANDARD FOR LOCAL BROWSER-BASED AI DEPLOYMENT