A researcher disclosed a JWT signature verification flaw in Titan, Microsoft's internal analytics service, that allowed bypassing authentication to access employee records and Bing search analytics data. The vulnerability could have exposed approximately 17 trillion rows of data across 17 connected databases. Microsoft locked down the endpoint on September 9, 2026, following coordinated disclosure on September 5.
// Get alerts for Microsoft Azure