Authenticator was granting session tokens left and right, but the bug has now been fixed.

Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.

Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...

A high-severity vulnerability in Microsoft Authenticator for Android let a malicious app with no Android permissions steal ...

A patched Microsoft Authenticator flaw let a rogue Android app pose as a trusted installed app and obtain tokens authorizing ...

The Microsoft Authenticator can be used to add an extra layer of security to accounts. However, the Android version of the ...

A security flaw in Microsoft Authenticator for Android could allow malicious apps to steal authentication tokens linked to ...

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...

A Microsoft Authenticator vulnerability let any Android app steal work account tokens. It’s now patched; update to ...

A newly patched flaw in Microsoft Authenticator for Android allowed unprivileged apps to steal access tokens for work accounts.