16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows

The document is a September 2026 security-news feed covering active exploitation of critical vulnerabilities, cybercrime campaigns, data exposure incidents, AI-agent abuse, phishing, malware, and security research. Notable items include exploited Citrix and F5 BIG-IP vulnerabilities, an Apple CoreGraphics zero-day exploited in targeted attacks, Salesforce Agentforce flaws enabling unauthenticated CRM data theft, cloud identity hijacking, AI-assisted intrusions, and major breaches or alleged attacks involving government, financial, technology, and critical-infrastructure organizations. The feed