Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

The Hacker News - Oct 27, 2026

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,

Read full article

More News

Oct 27, 2026

'One of only three skeletons': Nanotyrannus skeleton goes on display before New York auction

‘One of only three skeletons’: Nanotyrannus skeleton goes on display before New York auctionA rare Nanotyrannus skeleton is heading for auction with a price tag of at least $6million. Nicknamed “Jodi", the roughly 10-foot-all skeleton is being auctioned by Sotheby’s in...

Oct 27, 2026

How Billionaires Are Fighting the Prop 40 California Wealth Tax

The latest Silicon Valley billionaire club is a $333 million political ad machine that is heavily engaged in next week’s elections.

Oct 27, 2026

Leading figures from Expedia, Skyscanner and Booking.com among speakers announced for WTM

Senior figures from Expedia, Skyscanner and Booking.com are among those who will share their expertise on the Future Stage, Trends Stage and Experience Hub at WTM London, part of the RX Global portfolio. “This year’s programme reflects where the industry is heading, with data-led insight on the Trends Stage, practical thinking on the Future Stage, and creative problem-solving in the Experience Hub,” said Chris Carter-Chapman, Event Director at WTM London. “Whatever their role, attendees will leave with fresh ideas and the tools to put them into action.”

Oct 27, 2026

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server checks a client certificate and vice versa, and a revocation list is configured to block revoked

Oct 27, 2026

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for the flaw were released last month by Apple in

Oct 27, 2026

Texas agriculture commissioner: GOP could pay price for data center push

A longtime Trump supporter says rising costs, data centers and frustration in farm country could hurt Republicans at the ballot box.

Oct 27, 2026

Brainstacking: Can the latest TikTok trend actually reverse brain rot?

TikTok's latest trend claims to help combat brain rot and reduce doomscrolling with analog hobbies.

Oct 27, 2026

How China ‘risk factors’ loom over Anthropic’s hotly anticipated IPO filing

Open-weight models, China-US tensions, Taiwan – just a few of the more than dozen references to China-related risks cited in Anthropic’s much-anticipated listing prospectus, which was finally released on Monday after months of speculation. Mostly concentrated within the 93-page “risk factors” section of the filing with the US Securities and Exchange Commission, the disclosures reveal how the Silicon Valley start-up assesses the commercial threats posed by China and its artificial intelligence...

Oct 27, 2026

Neutrinos Are Everywhere. A Physicist Explains.

Dr. Francis Halzen, the recipient of the Nobel Prize in Physics, sheds some light on the mysterious, subatomic particles that whiz through us everyday.

Oct 27, 2026

Chinese scientists find a new way to turn Martian air into fuel

Chinese scientists find a new way to turn Martian air into fuelChinese scientists at the Deep Space Exploration Laboratory in Hefei developed a new catalyst, combining copper and sodium on a sponge-like crystal.The catalyst reacts with carbon dioxide, comprising over 95% of the Martian atmosphere...

Oct 27, 2026

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone. A buyer who trusted a counterfeit could have their crypto stolen, but the incident did not involve