TGViewer
Android Security & Malware Android Security & Malware @androidmalware · 44.9K subscribers
Post #2869 9.65K
Microsoft Authenticator’s Unclaimed Deep Link: A Full Account Takeover Story (CVE-2026–26123)
https://khaledsec.medium.com/microsoft-authenticators-unclaimed-deep-link-a-full-account-takeover-story-cve-2026-26123-e0409a920a02?sk=df506976e7c2d15fd29e70725873f6e2
Medium Microsoft Authenticator’s Unclaimed Deep Link: A Full Account Takeover Story (CVE-2026–26123) When your authentication app becomes the weakest link: How an unclaimed deep link exposed millions of Microsoft accounts
  • ❤ 14
  • ⚡ 3
  • 👍 2
  • 🥰 2
  • 💘 1
Open in Telegram All posts from @androidmalware
More from @androidmalware
  1. Sep 22, 2026Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC http…
  2. Sep 17, 2026RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts https://zimp…
  3. Sep 14, 2026Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration https://zimperium.com/b…
  4. Sep 14, 2026Vwork: Weaponized Open-source Software as an Addon for Gigabud https://www.group-ib.com/bl…
  5. Sep 9, 2026RCE in mexc Android app via Bypass URL validation to access the WebView, JS-Bridge with Pa…
  6. Sep 9, 2026WeWorm: The first zero-click worm to spread through WeChat calls across iOS and Android ht…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →