Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.

Hackers exploit Microsoft Teams support calls to infiltrate corporate networks, steal data, and hijack privileged accounts.

Authenticator was granting session tokens left and right, but the bug has now been fixed.

Account takeover threats go beyond stolen passwords as criminals exploit session cookies, SIM swaps and MFA fatigue to bypass ...

The hardware security key vs passkey question got sharper on July 21, 2026, when Yubico shipped YubiKey 5.8 firmware with ...

A Microsoft Authenticator vulnerability let any Android app steal work account tokens. It’s now patched; update to ...

A hidden security risk could leave businesses exposed long after the original breach is contained.

A high-severity vulnerability in Microsoft Authenticator for Android let a malicious app with no Android permissions steal ...

A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...

If you sign in to Microsoft 365 at work, your password is no longer the only thing standing between your inbox and an ...

A top-rated Microsoft employee plans to coast until Dec. 31 after accepting a voluntary exit package, raising questions about ...

Microsoft has resolved a Windows 11 issue that prevented non-administrator users from establishing Remote Desktop connections ...