Microsoft patches Authenticator bug that exposed Android work-account tokens

Malicious Android apps with no declared permissions could exploit Authenticator's broker to obtain work-account access tokens. Microsoft patched the issue before publication, according to RuntimeWire, which attributes the finding to researcher Ofek Levin. Cyber Security News reports that affected devices had Authenticator installed and a work account signed in.

• Cyber Security News identifies the flaw as CVE-2026-80097, with a CVSS score of 8.6.

Covered by 2 publishers within 9 hours of the first report.

• RuntimeWire: Enclave details patched Authenticator flaw that let Android apps impersonate Teams

Reporting2

CSN Cyber Security News Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions · Abinaya 2:33 AM

RTW RuntimeWire Enclave details patched Authenticator flaw that let Android apps impersonate Teams · Ryan Merket 11:31 AM

Related

THN Attackers breach Microsoft 365 accounts across 79 organizations October 26

BC Microsoft deploys emergency .NET updates to fix Brotli vulnerability October 26

THN uCreator spyware targets Telegram and WeChat through modified Android apps October 26

SW Hirudo Android malware swaps installed banking apps for tampered copies October 14

Topics AndroidMicrosoft