Android Microsoft Authenticator flaw let apps steal account tokens
CVE-2026-80097, scored 8.6, affects builds before 6.2606.4246; a zero-permission app could impersonate Microsoft apps.
1
Stories per day · 30 days
2 RSS
Relatedagent-security1android1api-retirement1authorization1ews1exchange-online1google-api1improper-authentication1least-privilege1microsoft-3651microsoft-authenticator1token-theft1
7 stories, newest first · one card per story
Stories tagged #microsoft-graph
Many minimal agent tool grants cannot be ranked
For 29.8–33.3% of Microsoft Graph tasks, minimal sufficient grants form an antichain with no smaller choice.
Microsoft explains how to restore blocked Exchange Online EWS
Admins can re-enable EWS until April 2027; Microsoft says apps should move to Microsoft Graph.
2
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
Cisco Talos attributes UAT-11587 (China-nexus) to compromising ~350 endpoints in eight Asian countries using the Antino backdoor with Microsoft Graph-based C2.
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Cisco Talos attributes China-nexus UAT-11587 to espionage against Asian governments using the Rust-based Antino backdoor, with ~350 compromised endpoints in eight countries.
2
Revoking the token didn’t kill the backdoor
Analysis of the GraphWorm implant shows Webworm operators rotate OAuth credentials to survive token revocation, using OneDrive dead-drop C2 invisible to network defenses.
1
Attackers use passkey-themed scams to hijack Microsoft 365 accounts
Microsoft tracks ongoing M365 cloud intrusions since May using passkey-themed helpdesk vishing, AiTM phishing, and device-code abuse.
6