Microsoft 365 Android apps exposed account tokens through a production coding error. FlagLeft vulnerabilities let malicious Android apps impersonate signed-in ...