Microsoft Authenticator could leak login codes—update your app now A bug in Microsoft Authenticator on Android and iOS could allow malicious apps on the same device to intercept authentication codes or sign-in links.

⚠️ Per chi fosse interessato:
#Microsoft #Authenticator potrebbe divulgare i codici di accesso: aggiornare subito l'app.

Microsoft Authenticator could leak login codes—update your app now A bug in Microsoft Authenticator on Android and iOS could allow malicious apps on the same device to intercept authentication co...

#Mobile #Security #Security #Bloggers #Network […]

[Original post on securityboulevard.com]

A vulnerability in Microsoft Authenticator for both iOS and Android (CVE-2026-26123) could leak your one-time sign-in codes or authentication deep links to a malicious app on the same device. Deep links are predefined URIs (Uniform Resource Identifiers) that allow direct access to an activity in a web or mobile application when clicked. In simple terms, they are specifically constructed links used to open an app and complete actions like signing in. Microsoft Authenticator is a mobile app that generates time-based one-time codes and handles sign-in links and QR-based logins for Microsoft and other accounts. It is widely used for multi-factor authentication (MFA) on personal phones, including BYOD (Bring Your Own Device) devices that protect access to corporate and production services. This vulnerability affects users who have Microsoft Authenticator installed on an iOS or Android device. For the vulnerability to be exploited, the user would first need to install a malicious app on their device and then accidentally choose that app to handle a sign‑in deep link. If that happens, the malicious app receives the one-time code or sign-in information and can potentially use it to authenticate as the victim.​ If successful, an attacker could: * Complete login flows to services that trust your Microsoft Authenticator codes. * Access the information and services available to the compromised account (email, files, cloud apps, or production systems in a BYOD context).​ * Potentially pivot to additional accounts if those are also protected by codes delivered via Authenticator on the same device. ## How to stay safe The fix for CVE-2026-26123 is already included in current releases, so installing updates is the most effective mitigation. * On iOS: Open the App Store. Tap the **My Account** button or your photo at the top of the screen. Scroll down to see pending updates and release notes. Tap **Update** next to an app to update only that app, or tap **Update Al** l. * On Android: Open the Google Play Store app. At the top right, tap the profile icon. Tap **Manage apps & device**. Under “Updates available,” tap **See details**. Next to the app you want to update, tap **Update**. To update all your apps at the same time, tap **Update all**. Note: If your device manufacturer has implemented a different method to apply app updates, the steps may vary slightly. If you are temporarily unable to update the app, avoid installing new apps that request to handle authentication links, QR-based sign-ins, or web-to-app sign-in flows. When scanning QR codes or tapping sign-in links, verify that the handler is Microsoft Authenticator or another trusted app, and not an unknown, recently installed, or otherwise suspicious app.​ Where possible, use alternative MFA options you already trust (such as built-in authentication in your password manager or platform-specific solutions like Apple’s password features) until you can apply the update. Use anti-malware protection for your mobile devices that can help detect malicious apps. * * * **We don’t just report on phone security—we provide it** Cybersecurity risks should never spread beyond a headline. Keep threats off your mobile devices by downloading Malwarebytes for iOS, and Malwarebytes for Android today.

Microsoft Authenticator could leak login codes—update your app now A bug in Microsoft Authenticator on Android and iOS could allow malicious apps on the same device to intercept authentication co...

#Bugs #News #authenticator #CVE-2026-26123 #Mobile

Origin | Interest | Match

GrapheneOS: Microsoft Authenticator does not support secure Android OS Microsoft's Authenticator is to delete Entra accesses from rooted and jailbroken devices. GrapheneOS could be affected.

#Microsoft va supprimer les accès #EntraID de son application d’authentification #Authenticator pour les appareils que la société détecterait comme rootés ou jailbreakés, ce qui pourrait concerner de fait aussi le système d’exploitation sécurisé #GrapheneOS. À suivre.
www.heise.de/en/news/Grap...

C'est un comble : Microsoft bloque cet OS ultra sécurisé au nom de la sécurité Microsoft Authenticator, la célèbre appli de sécurisation des connexions, va discriminer les utilisateurs et utilisatrices de ROMs alternatives comme

Microsoft Authenticator bloque GrapheneOS : pourquoi l'application devient incompatible ? — Frandroid. #GrapheneOS #Microsoft #Authenticator #sécurité
share.google/PmZv4NW03Rq8...

最近またSNSの乗っ取り被害に遭われた方が増えてきたので、二段階認証に認証器を使え！　と勝手に推奨する記事を書いてみた。
リプ欄にnote記事貼ってるんで、良かったら読んでみてくれ。('ω')ゞ

#二段階認証 #乗っ取り #セキュリティ #authenticator #SNS #X #bluesky

What I want from Microsoft Azure Authenticator:

* To pop up the input keyboard consistently every time so I'm not locked out from being able to authenticate



What I get:

* To scan my thumprint after I scan my thumprint



#azure #authenticator #JustGiveUpAndUseRfc6238

Biometric Yubico (Yubikey Bio) keys! let's go. An upgrade from our Yubikey 5. And some slight changes on how we authenticate for stuff everywhere.

Project underway! #cybersecurity #fido #2fa #authenticator #IT #sysadmin

Sorry, only part of the setup completed successfully While setting up Microsoft Authenticator on an Android device, if you see an error message saying “Sorry, only part of the setup completed suc...

#General #Authenticator

Origin | Interest | Match

Sorry, only part of the setup completed successfully While setting up Microsoft Authenticator on an Android device, if you see an error message saying “Sorry, only part of the setup completed suc...

#General #Authenticator

Origin | Interest | Match

#authenticator 几个auth 都不支持截图 导入token 或者其他设备的 验证 支持的app 其实也是不错的推荐

#authenticator 你用哪个？

New Microsoft Authenticator app version for Android and iOS - Dec. 17 Two factor authentication (TFA) is easy, convenient, and secure when you use Microsoft Authenticator. Use your phone, not your password, to log into your Microsoft account. Just enter your username, t...

New #MicrosoftAuthenticator app version released for #Android and #iOS #Authenticator
www.elevenforum.com/t/new-micros...

Enjoy two weeks of Proton for free Experience true online privacy. Protect your data with Proton for free for the next 14 days.

Deze zondag iets goeds doen voor je #privacy en tegen #bigtech? Stap over naar Proton. Met deze link krijg je twee weken gratis bij een abonnement. Stap over op #mail, #agenda, #vpn, #authenticator en andere tools!

pr.tn/ref/3YCH4QBC

[Article] via ID Tech FIDO Alliance Tightens Authenticator Verification with Metadata Service Update

Read about it here → idtechwire.com/fido-allianc...

Be sure to visit the newly updated MDS Overview landing page → fidoalliance.org/metadata/

#authenticator #verification #metadata

[HOWTO] Restore credentials of Work or School account(s) in Microsoft Authenticator App Switching Android smartphones complicates restoring Work or School account credentials, requiring re-signing into accounts and possibly resetting MFA.

Blogged: [HOWTO] Restore credentials of Work or School account(s) in Microsoft Authenticator App

#microsoft #authenticator #mfa #restore #workorschoolaccount

Proton Authenticator este acum disponibil prin F-Droid - TECHNEWSRO Proton Authenticator este acum disponibil pe F-Droid: aplicație 2FA open-source, securizată și fără reclame.

#Proton #Authenticator este acum disponibil prin #FDroid

techupdate.io//microsoft-authenticator...

#microsoft #cybersicherheit #passkeys #passwortmanager #authenticator

Bivial AG Introduces Innovative Authenticator App for Secure Transactions Bivial AG, a Swiss fintech company, has launched its new mobile app, the Bivial Authenticator, which offers security and privacy for digital transactions.

Bivial AG Introduces Innovative Authenticator App for Secure Transactions #mobile_app #Switzerland #Zug #Bivial_AG #Authenticator

Bivial AG Unveils Innovative Mobile Authenticator App for Secure Transactions Bivial AG has launched the Bivial Authenticator app, enhancing security for digital actions with a seamless, user-friendly interface that prioritizes privacy.

Bivial AG Unveils Innovative Mobile Authenticator App for Secure Transactions #Fintech #Switzerland #Zug #Bivial_AG #Authenticator

I used #GrapheneOS to turn my #Pixel into the closest I can get to a #dumbphone. It'll still run stuff like #Authenticator I need for work, and I can call Uber/Lyft if I'm stranded, but I avoid anything else. Revolutionary. Life without #doomscrolling is way more chill. Why didn't I do this before?

Authenticator Extension

@lascapi I like #authenticator. https://authenticator.cc/

Gibt es eigentlich etwas bekloppteres als den #Microsoft #Authenticator? Dieses "wir wollten es nicht so wie die anderen machen, können es aber auch nur schlechter"?

In der App eine Zahl anzeigen lassen und dann einen Browser drüberlegen, in dem man diese Zahl eingeben soll. Ihr spinnt doch […]

Gibt es eigentlich etwas bekloppteres als den #Microsoft #Authenticator? Dieses "wir wollten es nicht wie die anderen machen, können es aber nur schlechter"?

In der App eine Zahl anzeigen und dann einen Browser drüberlegen, um diese Zahl einzugeben. Ihr spinnt doch. #Drecksverein #Arschlochfirma

📰 Serangan Baru “Pixnapping” di Android Curi Kode MFA Piksel demi Piksel

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/10/15/serangan-pixn...

#android #cve-2025-48561 #exploit #google #authenticator #gpu.zip #keamanan #siber #mfa #pixnapping #side-channel

Authenticator app download: Get Proton Authenticator | Proton Download Proton Authenticator app for Windows, macOS, Linux, Android, and iOS. Protect your accounts with secure two-factor codes. No ads, no tracking.

みんなも使おう Proton Authenticator :vivaldia_2:

https://proton.me/authenticator/download

#Proton #Authenticator #2FA

> PixnappingはGoogle Authenticatorを起動して二要素認証コードが表示されるとそれをピクセル単位で記録し、光学文字認識(OCR)を用いて認識するそうです。

> 標的のアプリを開いた時に表示されるものはすべて、Pixnappingを利用する悪意のあるアプリによって盗まれる可能性があるため、チャットメッセージ、二要素認証コード、メールなどはすべて脆弱(ぜいじゃく)です。つまり、アプリに表示されない情報(保存されているが画面には表示されない秘密キーなど)は、Pixnappingに盗まれる心配はありません。

ということは #Proton #Authenticat […]

Nie rozumiem, dlaczego ludzie nie chcą zabezpieczać swoich kont. Rozumiem, że wydatek ok. 600 zł na klucz U2F może zniechęcić, ale weryfikacja 2FA np. Microsoft Authenticator jest darmowa.

#2FA #Authenticator

My favorite 2FA authenticator is actually my note-taking app There are plenty of authenticator apps, but I prefer using my note-taking app instead.

"My favorite #2FA #authenticator is actually my #notetaking #app"

www.makeuseof.com/why-i-use-st...

New Microsoft Authenticator app version for Android - Sep. 5 Two factor authentication (TFA) is easy, convenient, and secure when you use Microsoft Authenticator. Use your phone, not your password, to log into your Microsoft account. Just enter your username, t...

New #MicrosoftAuthenticator app version released for #Android #Authenticator
www.elevenforum.com/t/new-micros...