Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Summary
Microsoft has patched a vulnerability in its Authenticator app for Android that allowed malicious apps without permissions to impersonate trusted Microsoft applications and steal work account sign-in tokens. The flaw, tracked as CVE-2026-80097, has been addressed in Authenticator for Android version 6.2606.4246.
IFF Assessment
This vulnerability allows malicious applications to steal sensitive work account tokens, posing a direct threat to organizational security and user data.
Severity
Defender Context
This incident highlights the importance of keeping mobile applications, especially those handling authentication, up-to-date. Defenders should be aware of such vulnerabilities that could allow attackers to bypass authentication mechanisms and gain access to corporate resources. Monitoring for unusual activity related to work accounts on Android devices could also be a mitigation strategy.