Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

The feed reports multiple significant cybersecurity developments, including active exploitation of critical PHP2Shell vulnerabilities enabling unauthenticated remote code execution, a patched Microsoft Authenticator Android flaw that allowed permissionless apps to steal work-account tokens, widespread Brotli decoder memory corruption affecting several ecosystems, attacks against Dahua cameras, malware and ransomware delivery through Microsoft Teams support scams, token-replay compromises of Microsoft 365 accounts, and supply-chain or credential theft incidents. The most urgent items involve CV