16-Year-Old Finds Microsoft Token Flaw Exposing 17 Trillion Records

A 16-year-old researcher earned a $5,000 bounty after finding that Microsoft's internal analytics service Titan failed to verify token signatures, allowing forged admin tokens to access roughly 17.3 trillion stored records.

2026-09-26 ~ 2026-09-26 · 2 related posts

• 16-year-old's AI-assisted bug hunt exposed 17.3 trillion Microsoft records via unsigned token — rez0__ · 2026-09-26
• 16-year-old hacker breached Microsoft's Titan service via unsigned token, $5,000 bounty paid — rez0__ · 2026-09-26