Microsoft 365 Apps for Android: Debug Flag Enables Token Theft3. June 2026CybersecurityAn active debug flag in Microsoft 365 Android apps allowed arbitrary apps on the device to steal authentication tokens and take over user accounts completely. Share on: