Huntress spotted a white whale - a malicious toolkit stored as a database object.

Devart today launched Devart SQL Formatter Online, a browser-based SQL Server code formatter that provides immediate ...

A post-exploitation toolkit has been found compiled and stored inside an Oracle database as schema objects, giving attackers ...

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...

Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform.

Independent testing firm finds Next-gen GP baseline matches classic GP pricing while delivering more than double the ...

MySQL, PostgreSQL, and Microsoft SQL Server are compared side by side to help beginners understand the strengths, limitations ...

Wiz Research disclosed Wednesday that a chain of vulnerabilities in Azure Cosmos DB's Gremlin query engine — which the firm named CosmosEscape — allowed any attacker with a standard Cosmos DB account ...

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors ...