Huntress spotted a white whale - a malicious toolkit stored as a database object.

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

SQL Server databases often contain precious data such as customer information, financial records, and account passwords—assets that are often both essential to the business and subject to compliance ...

In response to this, the application security SaaS company Indusface has detailed the potential financial impact of SQL Injection attacks on businesses. Additionally, they offer best practices to help ...

Microsoft’s July 2025 Patch Tuesday fixes 137 vulnerabilities, including critical flaws in SQL Server, Netlogon, Office, and the .NET Framework. Microsoft’s July 2025 Patch Tuesday rollout delivered ...