Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Teen researcher found Microsoft Titan auth flaw exposing 17.3 trillion rows

A 16-year-old security researcher, aided by a self-built AI hackbot named Antares, discovered that Microsoft's internal Titan analytics platform failed to verify JWT signatures, letting him gain admin access and query databases containing an estimated 17.3 trillion rows, including employee and account data. Microsoft locked down the API, confirmed the finding, and paid a $5,000 bug bounty.

Occurred 5 September 2026 · Disclosed 30 September 2026 · Record updated 1 October 2026

Impact

Unauthorized admin access to Microsoft's internal Titan analytics service exposed metadata including ~25,000 account/email records, 17,990 employee email records, 15,001 employee organization records, and access to 17 connected analytics databases totaling an estimated 17.3 trillion rows.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/security/2026/09/30/16-year-old-researcher-found-a-microsoft-bug-got-admin-access-to-databases-with-173-trillion-rows/5300240