The incident, detected on July 27, 2026, shows how insecure public-facing applications can allow attackers to move from a database query to full control of the underlying operating system. The initial alert involved credential theft activity on a Windows endpoint hosting an Oracle database. Security tools detected reg.exe creating copies of sensitive registry hives, including […]
The post Oracle SQL Injection Attack Escalates to SYSTEM-Level Windows Code Execution appeared first on Cyber Security News.