A threat group named 'ResumeLooters' has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site ...

Researchers say a bug let them add fake pilots to rosters used for TSA checks. TSA security could be easily bypassed by using a simple SQL injection technique, say security researchers.

Major TSA security flaw exposed, simple SQL vulnerability could have allowed access to airplane cockpits An attacker could have added fake pilots to the roster using SQL injection By Zo Ahmed ...