Developing2 outlets · over 13 hours
Hackers run khunt post-exploitation toolkit from Oracle database
Attackers exploited a SQL injection flaw in a public-facing Java application to install the khunt post-exploitation toolkit inside an Oracle database, achieving SYSTEM-level code execution on a Windows server. Huntress discovered the attack on July 27, 2026, tracing malicious requests to IP 178.162.151[.]229.
The story so far2 updates, latest first.
Tracked by ByteBrief