CRITICAL POSTGRESQL BUG TIED TO ZERO-DAY ATTACK ON US TREASURY

Summary from the TLDR InfoSec newsletter

A critical SQL injection vulnerability in PostgreSQL, working alongside a BeyondTrust zero-day, was essential to the December US Treasury breach. The bug affects all PostgreSQL versions but requires complex exploitation, which is why it may have caught the Treasury's security team by surprise.