It was discovered that the intrusion used a SQL injection vulnerability that had existed in PostgreSQL for more than nine years but had gone unnoticed, as software engineer Nick Agliano wrote in ...

Researchers say a bug let them add fake pilots to rosters used for TSA checks TSA security could be easily bypassed by using a simple SQL injection technique, say security researchers.