A routine virtual hard disk copy triggered days of Hyper-V resynchronization, offering a lesson in why VM-aware export tools matter.

Hackers abused a Microsoft SQL Server to run commands, steal credentials and source code, and move files in a Viva Aerobus-linked attack.

An exposed attacker server containing an MSSQL-focused post-exploitation toolkit, credential-harvesting artifacts, and stolen ...

A TerminalFix intrusion campaign that uses ClickFix-style social engineering, PowerShell execution, DLL sideloading, and a ...

Microsoft released its largest security update in company history on September 8, 2026, closing 966 vulnerabilities across Windows, Office, Exchange Server, SQL Server, and Azure in a record-breaking ...

This article describes a critical SQL Server Failover Cluster incident caused by a default “Add all eligible storage” setting during node addition and subsequent run validate cluster tool, which led ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. The attack was discovered by ...

A SQL injection vulnerability that many organisations might consider a decades-old, well-understood threat has been used as the entry point for a far more sophisticated attack, after threat actors ...

Microsoft is walking away from more products this year than it did in 2025. Products that still run on millions of devices, including Windows 11 24H2, Office 2021, SQL Server 2016, and Windows Server ...

Federal agencies operating on-premises Microsoft SharePoint Server are under a hard patch deadline today — July 4, 2026 — after the U.S. Cybersecurity and Infrastructure Security Agency confirmed on ...