Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,
| CVE | CVE-2026-80097 |
|---|---|
| 정보원 | The Hacker News |
| 수집 시각 | 2026. 10. 27. 오후 09:17 |
| 데이터 | Markdown JSON |
2026. 10. 27. 오후 09:09, The Hacker News에서 "Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens"을(를) 게시했습니다 (유형: 보안 뉴스). CVE: CVE-2026-80097.