Microsoft patches a severe flaw in its Android Authenticator app that could let untrusted apps impersonate Microsoft apps and obtain delegated account tokens (Abinaya/Cyber Security News)
Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps …
We haven't written up this one. Techmeme has the full story — the link below goes straight to it.
This story
This is one outlet's version. Read the fullest account.
- Microsoft and others push out emergency patches for a critical flaw in Brotli, the C decoder library built into Node.js, that could allow remote code execution (Bill Toulas/BleepingComputer) bleepingcomputer.com
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages securityweek.com
