IT之家 · ITHome

Microsoft fixes token leak in Authenticator for Android

Researchers described the AuthMask attack chain, in which an Android app with no permissions could impersonate an installed first-party Microsoft app and receive its tokens from Microsoft Authenticator. The tokens granted full delegated access to email, files and calendars. Microsoft confirmed and fixed the issue; versions before 6.2606.4246 are affected.

Source published: Brief prepared:
Microsoft fixes token leak in Authenticator for Android
Image source · IT之家 · ITHome

What to know

  • 01

    The affected com.microsoft.identity.client.AccountChooserActivity activity could be launched by any app on the device.

  • 02

    The flaw is tracked as CVE-2026-80097 and affects Microsoft Authenticator for Android versions earlier than 6.2606.4246.

Why it matters

The report is relevant to Microsoft Authenticator users on Android because the affected account tokens carry access to email, files and calendars.

Original sourceRead the source · IT之家 · ITHomewww.ithome.com

AI-assisted brief. Read the source for full details. Editorial & sourcing policy

Keep reading

雷鸟 iO+ unveiled with rounded frames and binocular full-color displays
IT之家 · ITHome

雷鸟 iO+ unveiled with rounded frames and binocular full-color displays

雷鸟创新 announced 雷鸟 iO+, its fourth-generation binocular full-color AI glasses. Rounded frames, tortoiseshell styling and gold accents give the device an appearance closer to conventional eyewear. It uses fourth-generation Micro LED waveguide technology, with frame endpieces similar in size to the previous model. Detailed specifications, feature configurations and the sales launch date have not been disclosed.

Bilingual brief