---
title: "Episode 1: All the Way to RCE"
description: "Not your usual security webinar.\nMost security webinars tell you what could go wrong, ‘The Sting’ shows you what already did."
image: https://hi.sweet.security/hubfs/Frame-2.png
---
[](https://www.sweet.security?hsLang=en) [Register](https://hi.sweet.security/the-sting-series/episode-1#register)
LIVE WEBINAR
[Episode 1](https://hi.sweet.security/the-sting-series/episode-1#episode)[What to expect](https://hi.sweet.security/the-sting-series/episode-1#agenda)[Speakers](https://hi.sweet.security/the-sting-series/episode-1#speakers)
# ‘The Sting’
Real life attacks, live investigation, **in under 25 mins.**
**Episode 1: All the Way to RCE Examining an attack on a Fortune 500 finance company.
Attack Type: SQL-to-Shell RCE - Blocked Inline
DATEThursday, October 15, 2026 TIME11:30 AM ET | 8:30 AM PT**
**## Register *today***
**## Not your usual security webinar.
Most security webinars tell you what could go wrong, ‘The Sting’ shows you what already did.
Join Sweet’s research team for a 25-minute deep dive into real attack scenarios - tracing how each attack unfolded, where it was stopped, and its root cause.
EPISODE 1
### ALL THE WAY TO RCE An unexpected attack on a Fortune 500 finance company
An unexpected attack on a Fortune 500 finance company
Attack Type: SQL-to-Shell RCE - Blocked Inline
An internet-facing application at a Fortune 500 finance company had an open path, one that nobody had closed. An attacker found it, moved deeper into the environment, reached the database, and executed a remote code execution attempt.
While Sweet traced the attack end-to-end at runtime, in real time the final exploitation attempt was blocked inline, before it could go any further.
From the first external request to the moment it was stopped, on this episode of ‘The Sting’, we'll open up the full chain live, the same view the customer's team used.
Want to see exactly how it happened?
[Register today →](https://hi.sweet.security/the-sting-series/episode-1#register) CAUGHT in the action
[Can't make the live session? *Register anyway - we'll send you the recording.*](https://hi.sweet.security/the-sting-series/episode-1#register)
## What to expect
5′
LIVE · 15′
5′
1. ### Opening
We’ll introduce the speaker and set the scene for the investigation.
5 min*no.* 01
2. ### Live Investigation
We’ll walk you through the same view the customer's team had. How the attacker moved, what made it possible, and the exact moment it got caught.
15 min*no.* 02
3. ### Q&A
Your questions, answered live.
5 min*no.* 03
## Speakers
### Orel Ben Ishay
CPEO, Sweet Security 
### Noa Glumcher
VP Marketing, Sweet Security 
## About ‘The Sting’
‘The Sting’ is Sweet Security's live attack investigation series - war stories from the field, investigated live. Every episode is a real attack that is unraveled step by step.
Float like a feather. Sting like a bee. 🐝
[Register today →](https://hi.sweet.security/the-sting-series/episode-1#register)
[](https://www.sweet.security/?hsLang=en)
Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.
- [Runtime CNAPP](https://www.sweet.security/runtime-cnapp?hsLang=en)
- [AI Security](https://www.sweet.security/ai-security-platform-aisp?hsLang=en)
- [Integrations](https://www.sweet.security/integrations?hsLang=en)
Use Case
- [Cloud Application Detection & Response (CADR)](https://www.sweet.security/product/detection-response?hsLang=en)
- [Cloud Visibility](https://www.sweet.security/product/cloud-visibility?hsLang=en)
- [Vulnerability Management](https://www.sweet.security/product/vulnerabilities-management?hsLang=en)
- [Identity Threat Detection and Response (ITDR)](https://www.sweet.security/product/identities-security?hsLang=en)
- [Cloud Security Posture Management (CSPM)](https://www.sweet.security/product/runtime-cspm?hsLang=en)
- [API Security](https://www.sweet.security/product/api-security?hsLang=en)
Sweet For
- [CISOs](https://www.sweet.security/solution/sweet-for-cisos?hsLang=en)
- [CloudSec & DevSecOps](https://www.sweet.security/solution/sweet-for-cloudsec-devsecops?hsLang=en)
- [SOC & IR](https://www.sweet.security/solution/sweet-for-soc-ir-teams?hsLang=en)
- [AppSec](https://www.sweet.security/solution/sweet-for-appsec?hsLang=en)
- [All Resources](https://www.sweet.security/resources/latest?hsLang=en)
- [Blog](https://www.sweet.security/blog?hsLang=en)
- [White Papers](https://www.sweet.security/resources/white-papers?hsLang=en)
- [Case Studies](https://www.sweet.security/resources/case-studies?hsLang=en)
- [Webinars](https://www.sweet.security/resources/webinars?hsLang=en)
- [What is CNAPP?](https://www.sweet.security/what-is-cnapp?hsLang=en)
- [Videos](https://www.sweet.security/resources/videos?hsLang=en)
- [Solution Briefs](https://www.sweet.security/resources/solution-briefs?hsLang=en)
- [Publications](https://www.sweet.security/resources/press-releases?hsLang=en)
- [Datasheets](https://www.sweet.security/resources/datasheets?hsLang=en)
- [About Us](https://www.sweet.security/about?hsLang=en)
- [Contact Us](https://www.sweet.security/contact?hsLang=en)
- [Get a Demo](https://www.sweet.security/demo?hsLang=en)
[Terms](https://www.sweet.security/legal/terms?hsLang=en)[Privacy policy](https://www.sweet.security/legal/privacy?hsLang=en) Cookie Settings © Sweet 2026
[](https://www.linkedin.com/company/sweet-security/)[](https://twitter.com/Sweet_cloud_sec)[](https://join.slack.com/t/sweet-community/shared_invite/zt-20wmxuiwx-jT8Lre4ov24Lml3_puHaOQ)**