If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to tap anything. Here’s what happened Authenticator does more than show six-digit codes. On Android it also acts as a “broker.” When... Weiterlesen: Microsoft Authenticator vulnerability let rogue Android apps steal wo…
Intelligence View
⚡ tsecurity.de Intelligence
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
CVE-2026-113790 | py-pdf pypdf up to 6.20.x resource consumption (EUVD-2026-107330)
11 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-110879 | FasterXML jackson-databind Generic Argument Validation DatabindContext._resolveAndValidateGeneric deserialization (EUVD-2026-111532) VVulDB Updatesvor 4 Std.CVE-2026-110747 | FasterXML jackson-dataformat-protobuf ProtobufParser._readStringKey integer overflow (EUVD-2026-111531) VVulDB Updatesvor 4 Std.CVE-2026-104895 | FasterXML jackson-dataformat-smile Asynchronous Smile Parser _decodeVInt allocation of resources (EUVD-2026-111530) VVulDB Updatesvor 4 Std.CVE-2026-104016 | FasterXML jackson-dataformat-protobuf Protobuf Parser _finishShortText len heap-based overflow (EUVD-2026-111529) VVulDB Updatesvor 4 Std.CVE-2026-118338 | Google Chrome up to 156.0.8078.47 Animation use after free (EUVD-2026-111474) VVulDB Updatesvor 4 Std.CVE-2026-118312 | Google Chrome up to 156.0.8078.47 Paint memory corruption (EUVD-2026-111473)
+5
11 Quellen
CVE-2026-109705 | Mozilla Firefox up to 153.4/157 Networking use after free (Nessus ID 372630)
10 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-117866 | Mozilla Firefox up to 115.43/153.5/158 Canvas2D use after free (Nessus ID 372630) VVulDB Updatesvor 6 Std.CVE-2026-118174 | Mozilla Thunderbird up to 153.5/158 OpenPGP information disclosure (Nessus ID 372632) VVulDB Updatesvor 6 Std.CVE-2026-118175 | Mozilla Thunderbird up to 153.5/158 information disclosure (Nessus ID 372632) VVulDB Updatesvor 6 Std.CVE-2026-118176 | Mozilla Thunderbird up to 153.5/158 Mailbox URL improper authentication (Nessus ID 372632) VVulDB Updatesvor 6 Std.CVE-2026-118177 | Mozilla Thunderbird up to 153.5/158 Calendar Subscription input validation (Nessus ID 372632) VVulDB Updatesvor 6 Std.CVE-2026-117860 | Mozilla Firefox up to 153.5/158 Navigation cross-domain policy (Nessus ID 372631)
+4
6 Quellen
CVE-2026-106013 | Artbees Jupiter X Core Plugin up to 4.61.0 on WordPress Twitter/X Social Login verify_twitter_callback improper authentication (EUVD-2026-111538)
5 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-107745 | tigroumeow AI Engine Plugin up to 3.8.4 on WordPress upload_file unrestricted upload (EUVD-2026-111565) VVulDB Updatesvor 3 Std.CVE-2026-109209 | plugins360 All-in-One Video Gallery Plugin up to 4.9.7 on WordPress Input Sanitization save_meta_data embedcode cross site scripting (EUVD-2026-111564) VVulDB Updatesvor 3 Std.CVE-2026-111314 | cservit Affiliate-Toolkit Plugin up to 3.9.2 on WordPress AJAX handler atkp_product_producturl cross site scripting (EUVD-2026-111563) VVulDB Updatesvor 3 Std.CVE-2026-97019 | mohammed_kaludi Amp for Wp Plugin up to 1.1.17 on WordPress Shortcode wp_filter_kses headline-* cross site scripting (EUVD-2026-111562) VVulDB Updatesvor 3 Std.CVE-2026-109999 | AI Marketing Expert Plugin up to 1.2.8 on WordPress Chatbot wp-admin/index.php name cross site scripting (EUVD-2026-111561)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4300063/it-security-nachrichten/microsoft-authenticator-vulnerability-let-rogue-android-apps-steal-work-account-access/