❗️ A bug in Microsoft Authenticator let an Android app with zero permissions pose as Teams and steal a user's work-account tokens. In Enclave's tests, the tokens opened the victim's mailbox, files and calendar with no prompt. Microsoft fixed it in July as CVE-2026-80097.
'https://cdn4.telesco.pe/file/vgRekQPDR_2_TOhZo90MIXs-4PX-KblBFkgvDqfnm4gmk7jLlYqDvo71c_HA-waGH-2DYUEm6c1JE80XicQsjU-0FYWpfV90ao7LJ3_Jm-luR7sUc0nNJoPtQPs6AljGzsCkAmkVR8xbKj_a4V8P4M2WUqaaplsDDIGtPBBbClWWnSNexInJFYoSqBnVHud0aLtVcmzcP7RK5QxmTID0eMeAsw88a9udpHVRDwsPHT1cgNJezeJbEv4AAIVnHzh9F8Rj19BADKYfQtwfKhqU7KPnjvrQ2la4lKtRHO5ZwZ6laugU6yH9n3D2cX1JCMCCYUqdVaDzYDGYagRcWqZ3cQ.jpg';
Source: [International Cyber Digest](https://t.me/IntCyberDigest/2041)
Barking News
npub1xn…5efrf
2026-10-26 21:38:01 UTC
Author Public Key
npub1xnewsxw69t74nlxxsehe4earw47s9t5cqnlh8amy7nevwetuf6ass5efrfSeen on
wss://relay.damus.ioPublished at
2026-10-26 21:38:01 UTCEvent JSON
{
"id": "a0a5ec3787f04a90cfd8ac337341a146dfc15c0c7ad69246e2642e6acd2e5570",
"pubkey": "34f2e819da2afd59fcc6866f9ae7a3757d02ae9804ff73f764f4f2c7657c4ebb",
"created_at": 1793050681,
"kind": 1,
"tags": [],
"content": "❗️ A bug in Microsoft Authenticator let an Android app with zero permissions pose as Teams and steal a user's work-account tokens. In Enclave's tests, the tokens opened the victim's mailbox, files and calendar with no prompt. Microsoft fixed it in July as CVE-2026-80097.\n\n'https://cdn4.telesco.pe/file/vgRekQPDR_2_TOhZo90MIXs-4PX-KblBFkgvDqfnm4gmk7jLlYqDvo71c_HA-waGH-2DYUEm6c1JE80XicQsjU-0FYWpfV90ao7LJ3_Jm-luR7sUc0nNJoPtQPs6AljGzsCkAmkVR8xbKj_a4V8P4M2WUqaaplsDDIGtPBBbClWWnSNexInJFYoSqBnVHud0aLtVcmzcP7RK5QxmTID0eMeAsw88a9udpHVRDwsPHT1cgNJezeJbEv4AAIVnHzh9F8Rj19BADKYfQtwfKhqU7KPnjvrQ2la4lKtRHO5ZwZ6laugU6yH9n3D2cX1JCMCCYUqdVaDzYDGYagRcWqZ3cQ.jpg'\n\nSource: [International Cyber Digest](https://t.me/IntCyberDigest/2041)",
"sig": "6db426f8d82e9454394960c5fff2150a0a3216e1b5e3fbd16216c4c7a31b7892d2b2b25e7aabfd2f620b3024fc67a77c581ca6913ed55dd8970cdbb6d1f51500"
}