this 16 yo kid gained access to 17 trillion microsoft users records, by using "admin" as username
the craziest part is that he didn't even need real admin credentials. Microsoft's internal API never verified JWT signatures, letting him forge an authentication token. After getting past its other checks, changing the u
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/hacking
Originally published by r/hacking. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.