As cited
Copy frozen at (site build).
vulnerabilities
16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data
A 16-year-old researcher discovered a flaw in Titan, Microsoft's internal analytics service, that allowed an attacker to impersonate an administrator by forging login tokens without signature verification. The vulnerability provided access to 17 databases containing approximately 17.3 trillion rows of data, including employee records and Bing search analytics.
Why it matters: Microsoft security teams need to audit Titan's token validation and any downstream systems relying on its authentication to contain exposure of employee and search data.
- Source published
- First seen by Cybersecurity Tracker