Authenticator was granting session tokens left and right, but the bug has now been fixed.

Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.

Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...

A high-severity vulnerability in Microsoft Authenticator for Android let a malicious app with no Android permissions steal ...

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...

Microsoft has patched a high severity security issue in Microsoft Authenticator for Android. Tracked as CVE-2026-80097, the ...

2FA backups on my terms ...

Lost your phone? Compare authenticator app recovery options for 9 authenticator apps, see which codes return, and learn what ...

A patched Microsoft Authenticator flaw let a rogue Android app pose as a trusted installed app and obtain tokens authorizing ...

Microsoft fixed a major security flaw in its Authenticator app for Android that could compromise Work or School accounts on ...