Tech Times

Metabase SQL Injection Breached Five Companies, Exposed All Connected Database Credentials

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, ...

This 'classic' decades-old SQL injection flaw could let hackers take over entire Windows servers

Huntress spotted a white whale - a malicious toolkit stored as a database object.
XDA Developers on MSN

OpenAI and Anthropic's models attacked real companies during safety tests, and most victims never noticed

OpenAI and Anthropic's models have been attacking companies around the world.
CSO Online

Attackers hid malware inside Oracle Database after SQL injection breach

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside the database and gain SYSTEM-level access to the underlying Windows server.