CVE-2026-80097 Authenticator broker token theft: Teams app ID with mismatched

Suraj A@cytech

•updated yesterday•3•0•4

Detects potential session hijacking or token theft where a user signs in using the Microsoft Teams app ID from an Android context with an unrecognized user agent, followed by Microsoft Graph API access from a different IP address and device ID within one hour.