Microsoft confirms Authenticator flaw could allow disclosure of your one-time codes. iOS and Android users are urged to update now.