‼️ BREAKING: A 16-year-old hacker broke into an internal Microsoft analytics service with a forged, unsigned login token and ran SQL as admin, reaching databases that held over 17 trillion rows, including Bing search analytics and 17,990 employee email records.
The service, called Titan, checked every field on the token except its signature, so just claiming to be "admin" got him in, writes the researcher, who goes by Faav.
He says he only pulled metadata and two single rows of Bing data, never touched customer data, and reported the flaw to Microsoft the same night.
Microsoft locked the endpoint four days later, paid him $5,000, and had editorial control over his write-up, cutting sections and figures and reshaping how the impact was described before it went public.
Zelenskyy visited the woman who gave birth to a son in a shelter yesterday during a Russian ballistic missile attack on Kyiv.
"Every woman deserves to give birth to her child in peace—without sirens and explosions. And every newborn deserves to begin their life in peace. We are doing everything to make this a reality as soon as possible."