SQL injections are child's play. Literally. It's last decade's "hack", if we can call it that. Using parameterized queries ( which you should be doing in the first place ) or simple defensive measures nullifies sql injection threats. The headline is clickbait nonsense.

Also it's a shame that defcon has turned into a "disney" event. Who even attends it anymore other than families and FBI agents and slimey salesmen peddling their software.