Software Security
Articles on protecting software from vulnerabilities, including secure coding practices, threat modeling, and approaches for building and maintaining safer applications.

CVE-2026-80097: Android Apps Can Steal Microsoft Work Tokens
A flaw tracked as CVE-2026-80097 let malicious Android apps with no declared permissions request work account tokens from Microsoft Authenticator, and Microsoft has a fix.
Read the featureSoftware Security
The featured article above is the only entry in this section so far.
