Mar 18, 2025 14:35:00 SQL injection vulnerability in PostgreSQL went undiscovered for over nine years and was used to break into the US Treasury Department ...

A threat group named 'ResumeLooters' has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site ...

SQL Vulnerabilities Continue To Plague Web Security A gray-hat hacker with a reputation for outing corporate Web site vulnerabilities says he's uncovered SQL injection flaws in the Web site of RBS ...

SQL injection and its ilk will stop being "a thing" only after organizations focus on security by construction.

Researchers say a bug let them add fake pilots to rosters used for TSA checks TSA security could be easily bypassed by using a simple SQL injection technique, say security researchers.

Errors that allow SQL injection and cross-site scripting attacks are still the top vulnerabilities that pen-testers find, especially at smaller companies.