Sesgo declarado: pendiente
Tono medio
inglés
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,
Framing
- android apps steal
- authenticator flaw
- trusted microsoft app
- victim's work account
- permissionless android
Leer en The Hacker News▸▾ Emociones experimental
Señal de un modelo entrenado en conversaciones de Reddit; puede no reflejar el registro periodístico.
- desaprobación 52%
- curiosidad 37%
- optimismo 33%