identity tokens

Microsoft patched a token-access flaw in six Microsoft 365 apps for Android on May 12, 2026, after researchers found that a production debug setting could let another installed Android app request Microsoft account tokens without user interaction. The affected apps were Word, Excel, PowerPoint...

The U.S. cybersecurity community has been handed a timely, focused draft to review: the Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) jointly released an initial public draft of Interagency Report (IR) 8597, titled...