Authenticator was granting session tokens left and right, but the bug has now been fixed.

Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.

Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...

A high-severity vulnerability in Microsoft Authenticator for Android let a malicious app with no Android permissions steal ...

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...

Microsoft has patched a high severity security issue in Microsoft Authenticator for Android. Tracked as CVE-2026-80097, the ...

2FA backups on my terms ...

A patched Microsoft Authenticator flaw let a rogue Android app pose as a trusted installed app and obtain tokens authorizing ...

A Microsoft Authenticator vulnerability let any Android app steal work account tokens. It’s now patched; update to ...