Security News Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens TheHackerNews Daniel Bender 27 Oct 2026 Share Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under certain conditions.