View Ridge Security
Back to Cyber Hose

Microsoft Authenticator Flaw Lets Android Apps Steal Account Tokens

A Microsoft Authenticator flaw allowing token theft headlines this run, alongside a CBFC data breach exposing 500+ film titles.

๐Ÿ’ฅ BREACHES & INCIDENTS

  • CBFC data breach exposes documents tied to 500+ film titles via e-Cinepramaan portal
    Confidential certification documents for over 500 film titles were exposed online from India's CBFC e-Cinepramaan portal.
    • Affects filmmakers and studios with certification applications submitted through India's CBFC e-Cinepramaan portal, including dozens of feature films.
    • Exposed records include shooting scripts, censor cut orders, certification files, and private distribution agreements dated December 2025 to August 2026.
    • Files were allegedly accessed through the portal and appeared on the Internet Archive, where they could be downloaded for several days before removal.
    • Distribution agreements for The Secret Agent and Good Luck, Have Fun, Don't Die were included, with at least three disclosing licensing fees.
    • No confirmed access method or software flaw has been identified; CBFC, cybercrime authorities, and CERT-In are investigating, and the Internet Archive removed the involved account.
    Sources ๐Ÿ“„ Source: thehindu.com ยท ๐Ÿ“Ž Coverage: cybersecuritynews.com ยท ๐Ÿ‘ via Cyber Security News, cryptika.com (discovered)

๐Ÿ”“ CVEs & KEV

  • CVE-2026-80097 โ€” Microsoft Authenticator โ€” CVSS 8.6 โ€” Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check