A 16-year-old bug bounty hunter, Faav, discovered a critical vulnerability in Microsoft's internal analytics service, Titan, which allowed him to access sensitive data without proper credentials. He exploited an unsigned JWT bypass and used AI-powered tools to map the attack surface and reach 17 trillion stored rows across various datasets.