Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

Huntress spotted a white whale - a malicious toolkit stored as a database object.

A post-exploitation toolkit has been found compiled and stored inside an Oracle database as schema objects, giving attackers ...

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...

DORA enforcement is live in 2026. See what Article 9's ICT change management mandate means for database teams, and how to close the compliance gap.

The new agentic code converter uses Genie Code-powered agents to analyze, translate, validate, and refine SQL workloads ...

SIOS Technology Corp., a leading provider of application high availability (HA) and disaster recovery (DR) solutions, today ...

The Pentagon on Thursday announced a contract with Oracle worth almost $7 billion over a decade, a big win for the software maker, which has been punished by investors this year.