Teenager's Custom AI Bot Unlocks Microsoft Database with Trillions of Records
A teenager, known as Faav, has hacked into Microsoft's internal Titan analytics platform, gaining access to 17 trillion total rows of data and 25,000 user accounts. The breach was made possible due to a lack of JWT token validation in the system.
Faav, who claims to have spent the past year hacking various companies including Amazon, Google, Adobe, and Microsoft, used his custom AI bot called Antares to automate the security check process.
With Antares, Faav was able to scan through the database quickly and identify vulnerabilities. He eventually exploited this weakness to gain access to sensitive employee data.
The teenager's actions have earned him a $5,000 bug bounty from Microsoft for reporting the issue.