Cybersecurity expert Ofek Levin unveiled a report detailing the AuthMask attack chain. This chain of attack enables unauthorized Android applications to mimic Microsoft's official apps, thereby deceiving the Microsoft Authenticator into relinquishing tokens. These tokens grant access to users' emails, files, and calendars. This security concern has been brought to Microsoft's attention and has been rectified in the Android iteration of Microsoft Authenticator, specifically impacting versions preceding 6.2606.4246. The vulnerability has been assigned the identifier CVE-2026-80097. Furthermore, Microsoft addressed 974 security flaws in its regular security update for September, establishing a new benchmark for the quantity of vulnerabilities resolved in a single month. This achievement was facilitated by the employment of AI-aided vulnerability detection technology, which aided Microsoft in swiftly identifying and rectifying numerous vulnerabilities.