Microsoft Authenticator for Android Fixes Critical Token Theft Vulnerability (CVE-2026-80097)

Microsoft has released a fix for a critical flaw (CVE-2026-80097) in its Authenticator app for Android. This vulnerability allowed a malicious application, even without specific permissions, to impersonate a trusted Microsoft app like Teams and steal sign-in tokens for a user's work account. The fix is included in Authenticator for Android version 6.2606.4246 or later, and users are advised to update their applications.