Specular identified a SQL injection vulnerability in software commonly used by hospitals that allows an attacker to compromise sensitive data. This blog outlines how we identified the vulnerability using AI, software vendor and supply train trust, and coming data sources to identify hidden web application.