Skip to content
June 2026 Page 75

June 2026

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Swati KhandelwalJun 03, 2026Vulnerability / Mobile Security A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps. Any other…