How I Could've Accessed 17 Trillion Microsoft Records
Summary
A vulnerability disclosure detailing how an internal Microsoft analytics service could be accessed due to missing JWT signature verification, potentially exposing large-scale data. The author outlines the attack chain, the scope of exposed data, responsible disclosure to MSRC, and subsequent remediation.