Penetration testing, OWASP Top 10, SAST/DAST, and the vocabulary of finding vulnerabilities before attackers do.
SQL injection is a vulnerability where an attacker inserts malicious SQL through an application's input fields to manipulate or extract data from its database — bypassing authentication, reading data they shouldn't see, or deleting records. It happens when user input is concatenated directly into a query instead of being parameterized, and remains one of the OWASP Top 10's most exploited flaws.