1 story taggedAccountManager.
A single misconfigured development setting bypassed token-protection controls in Microsoft's Android apps. The blast radius was massive.