A patched Microsoft Authenticator flaw let a rogue Android app pose as a trusted installed app and obtain tokens authorizing work email and file access.
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a...
A newly patched flaw in Microsoft Authenticator for Android allowed unprivileged apps to steal access tokens for work accounts.
A critical vulnerability in the Microsoft Authenticator app for Android allowed malicious apps to obtain session tokens for pretty much any Microsoft app and hand them over to the attackers.Unlike...
First reported:
First saved on ClustZ:
Coverage updated:
We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.