Microsoft Authenticator flaw allows permissionless Android apps to steal work account tokens

A flaw in Microsoft Authenticator allows permissionless Android apps to steal work account tokens, according to a report. The vulnerability affects token security for Microsoft work accounts on Android devices.

Detected & updated continuously · Source: Nebula