Storia in 3 fonti

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

SecurityWeek Exclusive: Researchers discovered a debug mode flaw in six Microsoft Android apps that could have enabled exploitation.

Raccontata da

securityweek.com

thehackernews.com

darkreading.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

securityweek.comStai leggendo1 mesi fa

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

A debug flag in 6 Microsoft Android apps (Word, PowerPoint, Excel, Copilot, Loop, OneNote) exposed token theft: any installed app could steal FOCI credentials that provide full access to Microsoft account data. Supply chain attack vector via auto-updated malware. Governance failure—debug mode shipped to production across major apps. Microsoft patched CVE-2026-41100/41101/41102 May 12; users must update.

originale

darkreading.com1 mesi fa

Coding Error Exposes Microsoft 365 Accounts to Takeover

A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers to steal logins and data.

Leggi questa versione → originale

thehackernews.com1 mesi fa

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Debug flag disabled Microsoft 365 Android token checks, letting untrusted apps access accounts; patches issued May 12 to reduce risk

Leggi questa versione → originale

Timeline cronologica

martedì 2 giugno 2026·securityweek.com
Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk
SecurityWeek Exclusive: Researchers discovered a debug mode flaw in six Microsoft Android apps that could have enabled exploitation.
mercoledì 3 giugno 2026·thehackernews.com
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
Debug flag disabled Microsoft 365 Android token checks, letting untrusted apps access accounts; patches issued May 12 to reduce risk
mercoledì 3 giugno 2026·darkreading.com
Coding Error Exposes Microsoft 365 Accounts to Takeover
A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers to steal logins and data.