The incident, detected on July 27, 2026, shows how insecure public-facing applications can allow attackers to move from a database query to full control of the underlying operating system. The initial ...