Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account.…
Sign in with GitHub to write an analysis. It's reviewed before publishing.
🐝 Community analysis
No one has analysed this yet. Be the first. Explain how it happened, who's affected and how defenders should respond.
Headline and excerpt © The Hacker News. CVE Hive links to the original report and doesn't verify third-party reporting. Community analyses are reviewed by the CVE Hive team before publishing.