Microsoft Authenticator vulnerability let rogue Android apps steal work account access

Reported by Help Net Security (Mirko Zorz)

Summary by Cyber Security News27 Oct 2026, 07:14 CET

About this summary. This is a short excerpt from the description that Help Net Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.helpnetsecurity.com/2026/10/27/microsoft-authenticator-vulnerability-patchedcve-2026-80097/

Microsoft Authenticator vulnerability let rogue Android apps steal work account access — Image: Help Net Security

If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to tap anything.

Read the full article at Help Net Security →

Source attribution: headline and facts are from Help Net Security (helpnetsecurity.com). Summary method: excerpt of the source description. See our source attribution policy.