Microsoft Authenticator vulnerability let rogue Android apps steal work account access

As cited

Copy frozen at 2026-10-27 08:34 UTC (site build).

vulnerabilities

Microsoft Authenticator vulnerability let rogue Android apps steal work account access

Researchers at Enclave discovered a vulnerability in Microsoft Authenticator for Android that allowed malicious apps to silently take over work accounts without requiring permissions or user interaction. The flaw exploited Authenticator's broker functionality, which handles sign-in requests from Microsoft apps like Teams and Outlook. Users of Microsoft Authenticator on Android should update the app immediately.

Why it matters: Organizations with employees using Microsoft Authenticator on Android face risk of unauthorized work account access; practitioners should ensure users update and review which apps have device access.

Source published

2026-10-27 06:14 UTC

First seen by Cybersecurity Tracker

2026-10-27 07:17 UTC