Microsoft Authenticator Android Flaw Lets Permissionless Apps Steal Work Tokens
A flaw in Microsoft Authenticator for Android allowed apps without permissions to impersonate Microsoft apps and retrieve work account tokens.
microsoft
5 stories
Microsoft 365 Token Replay Attack Compromises 79 Organizations
An attacker replayed stolen Microsoft 365 tokens to breach 79 organizations between July 14 and September 22, 2026, without using passwords.
Data Center Hardware Security: Marvell, Microsoft, and Oracle Standardize Unified Controls
Marvell, Microsoft, and Oracle collaborate to define a unified data-center hardware security framework, targeting firmware integrity, boot verification.
Microsoft Patch Tuesday Zero-Days Exposed
Multiple zero-day flaws were discovered in Microsoft’s October Patch Tuesday, including unauthenticated remote code execution and privilege escalation bugs.
Microsoft Patch Tuesday 2026: 1,417 Vulnerabilities, Including Exploited Shell Bypass and Exchange RCE
Microsoft released 1,417 patches on Oct 13, 2026, including an exploited Windows Shell bypass and a high-complexity Exchange RCE.