Security
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
The Hacker News·October 27, 2026·1 min read
Microsoft fixed a flaw in its Authenticator app for Android, tracked as CVE-2026-80097, that let a malicious app with no permissions pose as a trusted Microsoft app like Teams and collect sign-in tokens for a victim's work account. The fix is in version 6.2606.4246, so users should update immediately.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.