🚨 Microsoft Authenticator flaw let malicious Android apps impersonate Teams and obtain work account sign-in tokens. No app permissions needed. Researchers demonstrated access to email, files, and calendars. Microsoft has patched it. 🔗 Read more ↓

🚨🇺🇸 Microsoft Authenticator flaw allowed malicious Android apps to steal work account tokens Tracked as CVE-2026-80097, the high-severity vulnerability allowed an Android app with no permissions to impersonate trusted Microsoft apps such as Teams and request