Severe security flaw exposed in Microsoft's popular app

A severe security vulnerability was discovered in the Android version of Microsoft Authenticator, allowing malicious apps to steal access to accounts. Microsoft released an emergency update and urges immediate updating.

A severe security vulnerability was discovered in the Android version of the Microsoft Authenticator app. The flaw allowed a malicious app to impersonate a legitimate Microsoft app, such as Teams, and obtain access tokens to the user's account without authorization. Attackers could read emails, view the calendar, access files on OneDrive, and send messages on behalf of the user via Teams, all in the background without notification. Microsoft released an emergency update and urges updating to version 6.2606.4246 or higher. Researchers found no evidence of actual exploitation, but the recommendation is to update immediately and only download apps from official stores.

Severe security flaw exposed in Microsoft's popular app