microsoft 365 android

Microsoft patched a production coding error in several Microsoft 365 Android apps after Enclave researchers said malicious apps on the same device could silently obtain account tokens and impersonate signed-in users. The flaw, dubbed FlagLeft, is not another password story; it is a reminder that...

Microsoft patched a token-access flaw in six Microsoft 365 apps for Android on May 12, 2026, after researchers found that a production debug setting could let another installed Android app request Microsoft account tokens without user interaction. The affected apps were Word, Excel, PowerPoint...