Jun 42026 Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag Debug flag disabled Microsoft 365 Android token checks, letting untrusted apps access accounts; patches issued May 12 to reduce risk