Authenticator was granting session tokens left and right, but the bug has now been fixed.
Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...
An attacker used stolen sessions to break into Microsoft 365 accounts at 79 organizations, bypassing MFA and setting up ...
A Microsoft Authenticator vulnerability let any Android app steal work account tokens. It’s now patched; update to ...
A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...
Attackers replayed stolen Microsoft 365 tokens to compromise 97 accounts at 79 organizations and registered 48 rogue Entra ...
Microsoft fixed a major security flaw in its Authenticator app for Android that could compromise Work or School accounts on ...
To enable the passwordless feature for your Microsoft account, you first have to add the Microsoft Authenticator app. After that, you will be able to enable the passwordless mode for your account.