News
Microsoft Authenticator flaw lets malicious Android apps steal work‑account tokens
A patched vulnerability in Microsoft Authenticator for Android (fixed in version 6.2606.4246+) allowed malicious apps to impersonate Microsoft apps and obtain tokens for messages, files and calendars; exploitation requires user sign‑in and no attacks are known.