Enclave details patched Authenticator flaw that let Android apps impersonate Teams

Researcher Ofek Levin says an app with no Android permissions could exploit Microsoft Authenticator's broker to obtain delegated work-account tokens; Microsoft patched the bug before publication.

RuntimeWire · 2026-10-26T15:31:02.813Z