Security News Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag TheHackerNews Daniel Bender 03 Jun 2026 Share Debug flag disabled Microsoft 365 Android token checks, letting untrusted apps access accounts; patches issued May 12 to reduce risk