Identity & AccessA Microsoft Authenticator bug let silent Android apps grab work logins
Microsoft has patched a flaw in its Authenticator app for Android that let a sneaky app with zero permissions impersonate Teams and walk off with sign-in tokens for someone's work account.