A practical first look at Get-SqlSafe Community Edition, a free PowerShell tool for SQL Server security baseline assessment.
Explains newly discovered SQL Server privilege escalation paths from DatabaseManager role to sysadmin, including attack details and mitigation.
Overview of new permissions in SQL Server 2025, including AI model execution and changes to existing permissions.
A comprehensive checklist for securing and ensuring high availability of SQL Server database applications, covering deployment, operations, and resilience.
A technical checklist for database application vendors to ensure SQL Server security, high availability, and best practices in deployment and operations.
A tutorial on implementing Queryable Encryption for sensitive fields using the MongoDB Entity Framework Core provider, enabling encrypted data to remain searchable.
A guide to using SQL Server's Data Classification feature to audit access to sensitive data, focusing on the new SENSITIVE_BATCH_COMPLETED_GROUP action.
A guide to implementing essential security auditing for databases, using Microsoft SQL Server as a practical example to demonstrate configuration and importance.
SQL Server auditing fails to capture permission change attempts, creating a security gap. Article details the issue and a temporary workaround.
A guide to obfuscating sensitive data directly within SQL Server using a user-defined function, focusing on securing development environments.
A guide on using PowerShell to automate key security tasks for Azure SQL Databases, including firewall rules, encryption, and auditing.
A former Microsoft Azure Data security Program Manager reflects on their role, the impact of improving SQL's permission system, and reasons for leaving.
Explains the importance of parameterised queries in Laravel to prevent SQL injection attacks, making database interactions secure.
A Laravel security tip explaining how to use a custom encryption key for encrypted model attributes instead of the default app key.
Explains delegation of authority in security, focusing on SQL Server and Azure AD, covering identity vs. authorization level delegation and practical examples.
Explains the 'Need-to-know' security principle for SQL Server and Azure SQL, detailing access control methods and implementation scenarios.
Explains the Principle of Least Privilege (POLP) for security in SQL Server, covering user permissions, service accounts, and attack surface reduction.
An introduction to core security principles like Separation of Duties for designing and assessing secure database systems.
SQL Server 2019 introduces a new feature in Configuration Manager to simplify certificate import and management for TLS encryption.
Explains how to prevent SQL injection in Python using psycopg2's low-level sql.Identifier and sql.Literal functions for safe query building.
