- Huntress saw Oracle SQLi used to deploy rare khunt toolkit
- Khunt enabled OS commands, credential theft, and registry hive exfiltration
- Defense includes input sanitation and more
Someone managed to pair the classic SQL Injection (SQLi) attack with a nifty database trick to take over the underlying system entirely.