Critical Flaw in Microsoft Authenticator for Android: Unsanctioned Apps Exploited Work Account Tokens (CVE-2026-80097)
Microsoft Authenticator vulnerability (CVE-2026-80097) allowed zero-permission Android apps to steal work account tokens, fixed in version 6.2606.4246.
WhatsApp's Persistent Vulnerabilities: Post-Patch Flaws Expose Billions to Advanced Threats
Despite Meta's recent patches, new WhatsApp flaws tied to risky files, links, and Reels previews could still affect billions on iOS, Android, and Windows.