Microsoft SQL Server

Reported Context (4)

A publicly listed medical device manufacturer had a dedicated exfil script written specifically for their infrastructure, connecting directly to a Microsoft SQL Server instance and dumping every table to JSON. CloudSEK Finds Gentlemen Ransomware Affiliate’s Exposed Servers and Stolen Data
Oracle and Microsoft SQL Server services Chinese-Speaking Operator Used AI Agents to Target Government and Education Systems Across Asia
This group includes Mozilla Thunderbird (7.4%), Microsoft .NET (6.3%), Visual C++/Studio (5.4%), Microsoft SQL Server (4.4%), Mozilla Firefox (4.3%), Microsoft Edge (3.6%), Microsoft Office (1.6%) and LibreOffice Acronis Finds Patch Warning Rates Vary Widely Across SMB Windows Software
LA Metro (LACMTA) confirmed exfiltrated data is present in the staging directory, over 1 GB of Microsoft SQL Server database backups covering transit operations, personnel records, SCADA configurations, yard management Exposed Staging Server Reveals Data from Ababil of Minab Campaign, Including LA Metro Records

CVE (10)

Malware (3)

People (1)

Threat Actors (5)

MITRE ATT&CK (27)

Vendors (15)

Products (43)

Tools (33)

Industries (19)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.