Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer
vulnerability Imported story

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Source: The Hacker News · Published · Last checked 5 days ago · 1 min read
Illustration generated by CyberSecurity.pk from the story topic.
Read original source ↗ (thehackernews.com)

Publisher excerpt From The Hacker News

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.

Related CVEs

CVE-2026-80097 · HIGH
Keywords: CVE-2026-80097vulnerabilityvulnerability newsThe Hacker Newscybersecurity newssecurity news Pakistan

Reference: The Hacker News — thehackernews.com ↗

Related news

Chromium CVE-2026-76025: Use after freeChromium CVE-2026-76026: Memory corruptionChromium CVE-2026-76027: Memory corruptionChromium CVE-2026-76028: Use after free