News Microsoft Authenticator Flaw: How an App With No Permissions Could Steal Work Tokens by Rebecca Sutton November 2, 2026 by Rebecca Sutton November 2, 2026 A now-patched Android flaw let a rogue app pose as Teams and collect work account tokens from Microsoft Authenticator. Here is how it worked and what to check. FacebookTwitterLinkedinEmail