What is SQL Injection? The Attack That's Been Destroying Databases Since 1998

In 2008, attackers used SQL injection to breach Heartland Payment Systems, a payment processing company. They stole 130 million credit and debit card numbers. The breach cost Heartland over $140 million in settlements and fines. The CEO described it as an "international cybercrime ring." The technical execution was a SQL injection vulnerability in their web application.

In 2017, Equifax lost the personal data of 147 million Americans. While the initial vector was an unpatched Apache Struts vuln

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.