Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under certain conditions.
More info