Microsoft Authenticator vulnerability let rogue Android apps steal work account access

If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to tap anything. Here’s what happened Authenticator does more than show six-digit codes.

Summary from Help Net Security.

More in Endpoint