HOW I COULD'VE ACCESSED 17 TRILLION MICROSOFT RECORDS

Summary from the TLDR Dev newsletter

An internal Microsoft analytics service accepted unsigned JWTs, allowing a forged admin identity to run SQL across an environment estimated at 17.3 trillion stored rows. The bounded investigation exposed the consequences of skipping signature verification and showed how persistent agent exploration combined with a human insight to uncover the flaw.