Critical Microsoft Authenticator flaw let malicious Android apps steal account access

Authenticator was granting session tokens left and right, but the bug has now been fixed.
Windows Report on MSN

Microsoft Authenticator’s AuthMask vulnerability let malicious Android apps steal corporate tokens; now patched

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...

Is Microsoft Authenticator (Android) safe? A vulnerability that hands over work account 'passes' to malicious apps. Fixed in version 6.2606.4246 and later

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...