Critical Microsoft Authenticator flaw let malicious Android apps steal account access

Authenticator was granting session tokens left and right, but the bug has now been fixed.

Is Microsoft Authenticator (Android) safe? A vulnerability that hands over work account 'passes' to malicious apps. Fixed in version 6.2606.4246 and later

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...
Windows Report on MSN

Microsoft Authenticator’s AuthMask vulnerability let malicious Android apps steal corporate tokens; now patched

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...
Redmondmag.com

Researchers Find Microsoft Authenticator Bug That Exposed Corporate Access Tokens

Security researchers discovered a flaw in Microsoft Authenticator for Android that allowed malicious apps to pose as trusted Microsoft software and obtain authentication tokens, potentially opening ...
BetaNews

Microsoft patches high severity flaw in Authenticator for Android

Microsoft has patched a high severity security issue in Microsoft Authenticator for Android. Tracked as CVE-2026-80097, the ...
ZDNet

Microsoft Authenticator won’t manage your passwords anymore – or most passkeys

But most of this reporting overlooks the bigger shift that’s underway across Microsoft’s identity management portfolio and, in many cases, is missing key details about the future roles of Microsoft ...
BleepingComputer

Microsoft ends Authenticator password autofill, moves users to Edge

Microsoft has announced that it will discontinue the password storage and autofill feature in the Authenticator app starting in July and will complete the deprecation in August 2025. The decision is ...