June 3, 2026
A leftover debug flag in Microsoft 365 Android apps lets any installed app steal account tokens. Here's what developers need to know and do now.