‼️Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions Details: cybersecuritynews.com/micros… Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component. Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account. #cybersecuritynews

Cloudflare Detects Early Exploitation Attempts Targeting Two Leaked PHP Vulnerabilities Details: cybersecuritynews.com/php-ea… Cloudflare says it is seeing early attempts to exploit two critical PHP vulnerabilities whose details surfaced before the PHP security team’s planned release. The company has deployed an initial set of Web Application Firewall (WAF) rules to block known exploit patterns. Cloudflare says the rules are available to all customers, including those on free plans, and that it is updating them as new patterns appear. The warning raises the urgency for teams running PHP websites, but the firewall rules are only a temporary layer of protection. #cybersecuritynews