authenticator

Microsoft Authenticator Android Flaw Lets Permissionless Apps Steal Work Tokens

A flaw in Microsoft Authenticator for Android allowed apps without permissions to impersonate Microsoft apps and retrieve work account tokens.