Authenticator was granting session tokens left and right, but the bug has now been fixed.

Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...

Microsoft Authenticator's AuthMask flaw let malicious Android apps steal corporate tokens. Enclave researchers exposed the ...

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...

Microsoft has patched a high severity security issue in Microsoft Authenticator for Android. Tracked as CVE-2026-80097, the ...

A patched Microsoft Authenticator flaw let a rogue Android app pose as a trusted installed app and obtain tokens authorizing ...

A newly patched flaw in Microsoft Authenticator for Android allowed unprivileged apps to steal access tokens for work accounts.

A Microsoft Authenticator vulnerability let any Android app steal work account tokens. It’s now patched; update to ...

Microsoft wants to make Authenticator easier to navigate and use on Android and iOS. The rollout is already underway.

Security researchers discovered a flaw in Microsoft Authenticator for Android that allowed malicious apps to pose as trusted Microsoft software and obtain authentication tokens, potentially opening ...

Microsoft fixed a major security flaw in its Authenticator app for Android that could compromise Work or School accounts on ...