Brute-force attacks targeting MSSQL servers, Microsoft warns

The Redmond software giant has issued a warning explaining how databases with weak passwords might get compromised:

"The attackers achieve fileless persistence by spawning the sqlps.exe utility, a PowerShell wrapper for running SQL-built cmdlets, to run recon commands and change the start mode of the SQL service to LocalSystem," the Microsoft Security Intelligence team revealed.