Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

A post-exploitation toolkit has been found compiled and stored inside an Oracle database as schema objects, giving attackers ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Microsoft has released SQL Server Management Studio 22.9.0, delivering another round of updates to its primary graphical tool for administering SQL Server and related Azure database services. Updates ...

Devart today launched Devart SQL Formatter Online, a browser-based SQL Server code formatter that provides immediate ...

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The tactic disabled endpoint defenses as intended, but also accidentally broke the ransomware’s encryption process.

Both August client and server-side updates ship with empty known-issues lists. This may change over the coming days so checking back to the Microsoft Security Update Guide (MSRC) may be prudent.

It's an absolute beast with over 700 fixes and active zero-days landing right as major SQL and SharePoint versions hit end of support.