Cybersecurity is a particularly important avenue for any firm, especially those in tech. It"s even more critical for companies like Microsoft, which is not only responsible for managing its security infrastructure, but also the security posture of its clients and over a billion customers. The Redmond firm has a dedicated Microsoft Security Response Team (MSRC) that works with researchers all over the globe to identify security vulnerabilities in products made by the company and then collaborate with relevant teams to patch those issues.
Interestingly, MSRC partnered with a 13-year-old, identified as "Dylan", a few years ago, and has been working with him to fix vulnerabilities across various products. In terms of background, Dylan has worked with technical tools and languages from a very young age. Starting from Scratch, the teenager eventually familiarized himself with HTML and other programming languages and began analyzing the source code of educational platforms.
Dylan"s first foray into the world of professional cybersecurity was when his school disabled the ability for students to create chats in Microsoft Teams during the COVID-19 pandemic. After nine months of research and development, along with trial and error, Dylan discovered a vulnerability that allowed him to take over any Teams group. The teenager promptly reported this security hole to Microsoft, which actually had to update the terms and conditions of its Bug Bounty Program to enable people as young as 13 to participate.
Since then, Dylan has been working directly with MSRC to discover other vulnerabilities, too. The ethical hacker reported a security vulnerability in the Authenticator Broker service, too. He is known for his articulate communication skills and for not staying silent when he disagrees with MSRC"s initial assessments.
The prodigy, who was also MSRC"s youngest researcher, is now a junior in high school. He submitted 20 vulnerabilities reports last summer alone, which is impressive considering that he had only submitted six in total before that. You can read more about Dylan"s journey here.