Huntress spotted a white whale - a malicious toolkit stored as a database object.

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

In the beginning, there were files. Later there were navigational databases based on structured files. Then there were IMS and CODASYL, and around 40 years ago we had some of the first relational ...

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...

A post-exploitation toolkit has been found compiled and stored inside an Oracle database as schema objects, giving attackers ...

In SQL Server 2000, we had a nifty little utility called rebuildm.exe which would rebuild the master database in emergency situations. This utility was removed in SQL Server 2005 and has not been seen ...

MySQL, PostgreSQL, and Microsoft SQL Server are compared side by side to help beginners understand the strengths, limitations ...

The landscape for database management systems is changing more rapidly these days than it has since the earliest days of the relational DBMS. Not only do we have an onslaught of NoSQL database systems ...