{
  "id": 11033751,
  "title": "16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows",
  "url": "https://urgent.news/2026/09/30/16-year-old-researcher-found-a-microsoft-bug-got-admin-access-to-11033751",
  "topic": "science",
  "section": "Science",
  "published": "2026-09-30T18:29:41.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/09/30/16-year-old-researcher-found-a-microsoft-bug-got-admin-access-to-databases-with-173-trillion-rows/5300240"
  },
  "original_language": "en",
  "account": "A 16-year-old named Faav uncovered a critical security flaw in Microsoft's Titan analytics service. This flaw enabled him to bypass authentication and gain administrator access to databases containing approximately 17.3 trillion rows of data. Titan is an internal analytics platform, typically restricted to Microsoft employees. Faav utilized an AI-powered tool called Antares to locate an unsigned token that could access Titan's API via Azure Cloud Services. He then changed the token's user principal name to \"admin\" and successfully executed SQL commands as an admin. Microsoft acknowledged the find, stating it led to enhanced security measures. Faav received a $5,000 reward for his discovery, which he made after 10 days of persistence and assistance from his AI bot.",
  "summary": "It's 2 am. Do you know what your teen is doing?",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows",
        "url": "https://urgent.news/2026/09/30/16-year-old-researcher-found-a-microsoft-bug-got-admin-access-to",
        "published": "2026-09-30T18:29:41.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}