Storia in 3 fonti

Coding Error Exposes Microsoft 365 Accounts to Takeover

A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers to steal logins and data.

Raccontata da

securityweek.com

thehackernews.com

darkreading.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

darkreading.comStai leggendo1 g fa

Coding Error Exposes Microsoft 365 Accounts to Takeover

A disabled security setting meant to protect authentication across Android versions of key apps paved the way for attackers to steal logins and data.

originale

securityweek.com2 g fa

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

A debug flag in 6 Microsoft Android apps (Word, PowerPoint, Excel, Copilot, Loop, OneNote) exposed token theft: any installed app could steal FOCI credentials that provide full access to Microsoft account data. Supply chain attack vector via auto-updated malware. Governance failure—debug mode shipped to production across major apps. Microsoft patched CVE-2026-41100/41101/41102 May 12; users must update.

Timeline cronologica

martedì 2 giugno 2026·securityweek.com
Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk
SecurityWeek Exclusive: Researchers discovered a debug mode flaw in six Microsoft Android apps that could have enabled exploitation.
mercoledì 3 giugno 2026·thehackernews.com
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
Debug flag disabled Microsoft 365 Android token checks, letting untrusted apps access accounts; patches issued May 12 to reduce risk

Coding Error Exposes Microsoft 365 Accounts to Takeover

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

Timeline cronologica

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Coding Error Exposes Microsoft 365 Accounts to Takeover