Cyber security professional
Joined July 2023
- Tweets2.7K
- Following477
- Followers136
- Likes3.6K
Oops @JoshuaSteinman
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-we-…
Readers added context they thought people might want to know
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…
msrc.microsoft.com/update-guide/v…
🤔
What is this @KeithMcCullough
What is Williams NOT saying?
Drop @JoshuaSteinman @GalvanickCo a note
Really proud of the @GalvanickCo team. Within a few hours of this notice we pushed an update to our customers that detects this campaign.
If you’re running no-fail industrial systems and want to detect attacker behavior in near-real-time, drop me a note.
Great volatility update this morning (at 7:34 am eastern) from @Hedgeye @KeithMcCullough
@barnes_law
Thank you @tspooky
My reason to thank you: justice.gov/archives/opa/pr/…
EXCLUSIVE: Lt. Col. Tony Shaffer Calls on Trump Administration to Declassify All Able Danger and Saudi-Related Records So 9/11 Families Finally Get the Full Story
“If anybody’s going to actually have the courage to do something about this, it’s Donald J. Trump.”
@thelatmg @latimesstudios_
Congratulations @CWNazarian and team
What’s better than one criticality? TWO! 🎉
On June 18, 2026, at around 4:30 MDT, @valaratomics’ Ward 250 microreactor achieved initial criticality at the Utah San Rafael Energy Lab. It is the second nuclear test reactor to go critical under @ENERGY’s Reactor Pilot Program.
Congratulations to Valar Atomics!
