Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

thehackernews.com Oct 27, 2026

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Curated by Shubham · TechCapsules · Oct 27, 2026

AI-summarised brief · reviewed before publication

Microsoft fixed a flaw in its Android Authenticator app (CVE‑2026‑80097) that allowed a permissionless malicious app to masquerade as a trusted Microsoft app, such as Teams, and obtain sign‑in tokens for a victim’s work account. The vulnerability enabled full access to email, files, and calendar via Microsoft Graph tokens. The flaw required the victim to complete a sign‑in step in Authenticator and was not publicly exploited. Microsoft released the patch in version 6.2606.4246, urging all users to update.

💡 Why It Matters

· The breach exposes a critical identity‑broker weakness that could let attackers impersonate legitimate Microsoft services, undermining enterprise authentication security.
· Prompt updates are essential to prevent potential unauthorized access to corporate data.

Read full article on thehackernews.com

Android Find Hub app reveals how ‘Left Behind’ and ‘Ring your phone’…

Google is preparing to launch its first Android Find Hub tracker, the Pixel Tag, on November 11, and has updated the Find Hub app to preview new features. The update confirms “Left Behind” notifications, which alert users when items such as tags, devices, or headsets are left behind, and details a “Ring your phone” function that rings a paired phone by double‑tapping the tag. Users can enable notifications per device and transfer the ring feature between devices. The features are not live yet but are expected to roll out with the tracker’s debut.

💡 The new alerts give Android users proactive control over lost items, reducing the frustration of misplaced gear. The ability to ring a phone from a tag adds a practical, hardware‑agnostic tool for locating devices in real time.

9to5google.com · Oct 27

Vivo’s X500 series launches globally with MediaTek chips and insane cameras

Vivo has launched its X500 series worldwide, offering the X500, X500 Pro, and X500 Pro Max. The lineup skips the X400, moving directly to the X500, and features MediaTek’s new 2 nm Dimensity 9600 Pro chipset in the Pro models and Dimensity 9600M in the base model. All three phones sport 144 Hz AMOLED displays, up to 8,000 mAh batteries, 90 W wired and 40 W wireless charging, and dual IP68/IP69 protection. Zeiss‑co‑engineered cameras include a 50 MP main sensor, 85 MP telephoto options, and optional 400 mm extender. Video capabilities reach 8K at 30 fps and 4K 240 fps slow motion.

💡 The X500 series showcases MediaTek’s first 2 nm smartphone chip, positioning the company as a serious competitor to Qualcomm in high‑performance mobile processors. The extensive camera and video features signal a continued push toward premium photography and content creation markets.

9to5google.com · Oct 27

Android 17-based Redmagic OS 12 gets closer to a global release

Redmagic has begun rolling out its Android 17‑based Redmagic OS 12 to eight flagship devices in China, starting with the Redmagic 12 Pro+. The update delivers a visual overhaul with Liquid Glass‑inspired themes, a large lock‑screen clock, and an AI Magic Island for quick actions. It adds MORA, a VTuber‑style AI assistant, and AI Magic Assistant for automated tasks. Gaming features include a refreshed Game Space, an Esports Training Arena, X‑Gravity Platform 3.0, and enhanced live‑streaming tools. The global release is slated for early 2027, following the November 2026 launch of the Redmagic 12 Pro.

💡 The integration of AI assistants and live‑update features positions Redmagic as a pioneer in blending gaming with everyday productivity, potentially redefining how mobile users interact with their devices.

windowslatest.com · Oct 27

iOS 26 can run on an Android phone, and a developer proved…

Developer SmuOS (None24) successfully booted Apple’s iOS 26 natively on Microsoft’s discontinued Surface Duo 2, a dual‑screen Android device powered by a Snapdragon 888. The port uses the open‑source XNU kernel and a custom UEFI loader, enabling full touch and dual‑screen functionality; the Phone and Settings apps span both displays, and the device reports itself as an “iPhone 17 Pro Max.” The achievement demonstrates that iOS can run on non‑Apple ARM hardware, showcasing the flexibility of Apple’s open‑source kernel.

💡 The port shows that Apple’s operating system is not strictly bound to its own silicon, hinting at broader hardware compatibility possibilities. It also underscores the growing influence of community-driven projects in expanding the reach of proprietary platforms.

windowscentral.com · Oct 27

Forget cloud gaming, DroidDeck brings PC Game Pass to Android natively

Xbox Game Pass PC titles are now playable on Android devices through a new native client released in the latest DroidDeck 0.6.0 update, moving beyond the limited Xbox Cloud Gaming service that caps playtime for Ultimate members. The open‑source app, available on GitHub, runs games such as Hollow Knight: Silksong at over 100 fps on high‑end phones like the Ayn Thor, and Minecraft Dungeons 2 at 30‑40 fps, demonstrating viable performance across a range of titles. DroidDeck also aggregates libraries from Steam, Epic, GOG, Amazon Games and itch.io, positioning itself as a comprehensive handheld gaming hub. The feature is currently in testing, but early impressions suggest it could reshape portable PC gaming by delivering a pocket‑sized alternative to bulkier devices.

💡 It gives Android users a true PC‑gaming experience without cloud limits, turning smartphones into viable handheld consoles.

9to5google.com · Oct 27

The Galaxy Z Fold 8 still feels refreshing in all the best…

Samsung’s Galaxy Z Fold 8 remains a compelling foldable as Apple launches its iPhone Duo, intensifying direct competition between the two design philosophies. The reviewer praises the Z Fold 8’s “passport‑size” footprint, noting the outer screen offers a convenient quick‑view experience while the larger inner display serves as a mini‑tablet for multitasking. Despite minor UI crampedness on the outer panel and a visible crease on the inner screen, the device’s lightweight, thin profile and durability—surviving beach use with only a small dent—are highlighted. The author’s personal usage includes travel, media consumption, and a backup SIM for roaming, underscoring the phone’s practicality. While acknowledging Apple’s refined foldable with an almost invisible crease, the piece calls for Samsung to further improve its display and protective‑accessory ecosystem.

💡 Samsung’s ability to out‑perform Apple’s first‑generation foldable will shape consumer perception of Android’s flexibility versus iOS’s polish, influencing future adoption of multi‑screen smartphones.