Russia Hacked Routers to Steal Microsoft Office Tokens

Russian military intelligence hackers exploited known vulnerabilities in older routers to silently harvest Microsoft Office authentication tokens across more than 18,000 networks. The attack required no malware deployment, making it difficult to detect through traditional security tools. Developers should care because this demonstrates how infrastructure-level compromises can bypass application-layer security, putting any organization using Microsoft Office at risk of credential theft without any user interaction.