SQL Injection is a Thing of the Past and Other Lies We Tell Ourselves

Explore a revealing conference talk from BSidesCharm 2025 that challenges the misconception that injection attacks are obsolete. This 54-minute presentation examines why SQL injection, Command Injection, and XSS attacks continue to plague modern applications despite being decades old. Learn about research showing SQLi vulnerabilities account for 6.7% of open-source vulnerabilities and 10% in closed-source projects. Security researcher Mackenzie, former CTO and founder of Conpago who now works with Aikido Security, shares valuable insights on why these attacks persist and presents modern solutions to help developers and DevOps engineers build more secure systems. Benefit from the expertise of a contributor to publications like DarkReading, Financial Times, and Security Boulevard who has appeared as an expert in TV documentaries and interviews.