the app you downloaded to protect your accounts could have been the reason you got hacked microsoft authenticator on android had a vulnerability that let malicious apps steal your work account access tokens without needing any permissions at all It’s an app sitting on your phone doing whatever it wants the flaw was in the broker component, basically the part that handles authentication between apps it wasn't checking properly, so any random app could walk in and grab your tokens like they belonged there microsoft already patched it (CVE-2026-80097, CVSS 8.6 which is high severity) but if you haven't updated your authenticator app recently you might still be exposed this is the part that gets me. people install authenticator apps because they're told it's the safe thing to do, and it is but when the security tool itself has a hole, most people would never even think to check update your apps. not just your phone OS, your apps too. especially the ones you trust the most because those are the ones you stop paying attention to