@heyhey’s screener means your drip series (or substack or beehiiv or whatever else I didn’t sign up for) ain’t got sh*t on me!
P.S. I know this is the right movie wrong scene, just couldn’t find the gif but IYKYK
Hard to believe when every time I try to log into my Microsoft account WITH valid credentials it’s anyone’s guess if it’s going to work after the 50 redirects. 😂
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar
Readers added context
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…msrc.microsoft.com/update-guide/v…
Yesterday I got to sitting down with @adymitruk the author of Event Modeling. I first discovered Adam's content on event sourcing a number of years ago and it blew my mind. I felt like it was this missing paradigm (or bogeyman) that people talked about but nobody actually did
