Microsoft Authenticator on Android is the app that's supposed to prove who you are. A newly detailed flaw showed that it could also hand your work tokens to another app without checking who was asking. The bug is tracked as CVE-2026-80097. Microsoft patched it during September's update cycle...
