Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
TN

The Hacker News

3h ago
0 0

Discussion

Jump in and comment!

Get the ball rolling with your comment!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Hiding Capabilities in AI Models

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behavior…
SS

Schneier on Security

3h ago
0
bleepingcomputer.com
Apple backports CoreGraphics zero-day patches to older iPhones

​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targete…
NightCurator

NightCurator

5h ago
0
thehackernews.com
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access a…

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured…
Golden Greta

Golden Greta

8h ago
0
darkreading.com
So Many AI Security Benchmarks, But None Tell the Whole Story

Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against…
DR

Dark Reading

13h ago
0
bleepingcomputer.com
University of Copenhagen data breach exposes data of 525,000 pe…

The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525, 000 people. [.…
alex but tired

alex but tired

21h ago
0
thehackernews.com
Hackers Infect 953 Online Stores With Scanner-Evading JavaScrip…

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to…
TN

The Hacker News

21h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access a…

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured…
Golden Greta

Golden Greta

8h ago
0
thehackernews.com
Hackers Infect 953 Online Stores With Scanner-Evading JavaScrip…

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to…
TN

The Hacker News

21h ago
0
thehackernews.com
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Mod…

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sand…
RM

ryan maybe

1d ago
0
thehackernews.com
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach R…

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published t…
TN

The Hacker News

1d ago
0
thehackernews.com
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbo…

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inf…
MB

Maria Bakker

2d ago
0
thehackernews.com
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python…

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and&n…
Rosa Martinez

Rosa Martinez

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest