{"id":"thehackernews-b7d7e51c85e3","seq":1602987,"kind":"news","title":"Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens","url":"https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html","permalink":"https://vulnpulse.app/items/thehackernews-b7d7e51c85e3","summary":"Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,","severity":null,"techs":[],"cves":["CVE-2026-80097"],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-27T12:09:50.000Z","fetched_at":"2026-10-27T12:17:51.719Z"}