IDUG EMEA 2026

SQL injection remains one of the most damaging classes of flaws against data-driven applications—and the workflow around it has changed: security testers and attackers alike can pair classic tooling with generative AI to iterate payloads faster, interpret ambiguous responses, and explore injection chains with less manual trial and error. This session focuses on Db2-backed applications: how SQL injection manifests in practice, how to recognize fragile dynamic SQL and unsafe integration patterns, and how to prioritize prevention (parameterization, safe composition, and tight error handling). We will connect that baseline to today’s landscape—examples include AI-assisted DAST/exploration tools, AI-augmented automation around sqlmap, and red-team harnesses that probe whether LLM-driven apps avoid unsafe database access—so you leave with a clearer understanding of both defenses and new risks.This is an upgraded version of my session on IDUG EMEA 2022: SQL Injection and Db2 - Pathology and P