SecurityBleepingComputerabout 2 hours ago
Hackers run khunt post-exploitation toolkit from Oracle database
1 min read
Hackers exploited a SQL injection flaw in a Java app to install the khunt post-exploitation toolkit inside an Oracle database. Huntress discovered the attack on July 27, 2026, tracing it to IP 178.162.151[.]229. The toolkit ran commands with SYSTEM privileges and stole Windows credential hives.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyOracle
Summary by ByteBrief
