A disabled security setting meant to protect authentication across Android versions of key apps like Word, PowerPoint, and Excel paved the way for attackers to steal logins and data.
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
Summary + source link. No paywalls, no tracking.