SQL Injection definition in Cybersecurity

SQL Injection is a type of attack that makes it possible to execute malicious SQL statements. These statements control a database server behind a web application.

Notable Incidents

1. Sony Pictures hack in 2011, where personal information of employees and their families was leaked.
2. Yahoo breach in 2012, leading to the disclosure of 450,000 user credentials.

Mitigation Strategies

1. Use prepared statements and parameterized queries to ensure SQL code is safely executed.
2. Regularly audit and test web applications for SQL injection vulnerabilities.