News
threat-intel Hackers Can Hijack AI Agents Just by Planting Malicious Files in the Downloads Folder - GBHackers cybersecurity ICMacOS Malware Evolves Into Remote Access Trojan That Lets Hackers Control Infected Macs - CyberPress cybersecurity New DarkCore RAT Lets Hackers Masquerade as Victims Using Stolen Browser Sessions - CyberPress cybersecurity Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Login Tokens Without Permissions - CyberPress cybersecurity Hackers Use Fake Cloudflare Verification Pages to Target WordPress Admins With PHP Backdoors - CyberPress threat-intel Hackers Use PowerShell and Windows Error Reporting to Hide Malware on Infected PCs - GBHackers threat-intel Microsoft Issues Emergency .NET Security Updates to Fix Four Vulnerabilities - GBHackers cybersecurity Microsoft Releases Emergency .NET Security Updates to Fix Brotli Memory Corruption Flaw - CyberPress threat-intel Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens - GBHackers cybersecurity Hackers Bypass Windows Secure Boot on Fully Updated PCs Using BlackX Bootkit - CyberPress threat-intel Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497 - GBHackers cybersecurity Malicious AGENTS.md Files Hijack AI Coding Agents to Execute Malware and Steal Tokens - CyberPress threat-intel OpenAI Codex Breaks USB Drive Encryption in Minutes, Exposing Critical Security Flaws - GBHackers cybersecurity Cloudflare Releases Emergency WAF Rules for Critical Node.js Brotli Vulnerability - CyberPress cybersecurity AI Agent Breaks Encrypted USB Drive Protections and Decrypts Files Without Passwords - CyberPress
1 / 15
All news ›
Threat Intel

Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens

GBHackers ·

A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication tokens for a victim’s signed-in work account. This vulnerability is tracked as CVE-2026-80097 and affects Microsoft Authenticator versions earlier than 6.2606.4246. Microsoft has since issued a patch. Microsoft Authenticator Flaw Security […] The post Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.