Microsoft Authenticator flaw let Android apps steal account tokens with zero permissions
CVE-2026-80097 scores 8.6 on the CVSS scale.
Cyber Security News (@The_Cyber_News) posted on Monday about a Microsoft Authenticator flaw, CVE-2026-80097, with a CVSS score of 8.6. The post says it let malicious Android apps steal account tokens with zero permissions. It drew about 1,800 likes.
The post does not say whether a fix has shipped. Check Microsoft's advisory and update the app.
Why it mattersAn authenticator app holds sensitive login material. Make sure it is up to date.
