Privilege Escalation to sysadmin via Trustworthy Database setting
Explains the security risks of the SQL Server 'Trustworthy' database setting and how it can lead to sysadmin privilege escalation.
Explains the security risks of the SQL Server 'Trustworthy' database setting and how it can lead to sysadmin privilege escalation.
A guide on using a custom PowerShell module to manage users and permissions in Azure Cosmos DB for authorization scenarios.
Announcement of Sarpedon Quality Lab presenting sessions on SQL Server 2016's In-Memory capabilities and new Security features at the SQL Gulf 3 conference in Riyadh.
A guide to SQL Server schema design focusing on security best practices, moving beyond the default dbo schema for better access control.
Discusses critical SQL Server security patches (MS15-058) and emphasizes the importance of following security best practices like least-privilege access.
Overview of SQL Server 2016's key security and performance features, including Always Encrypted, Stretch Database, and real-time analytics.
A technical walkthrough implementing Row-Level Security (RLS) in Azure SQL Database using the AdventureWorks sample database.
A guide to configuring a Java application to connect to MongoDB using SSL encryption and access control rules.
Survey results on SQL Server database ownership reveal security risks, with recommendations for best practices and secure configurations.
A security analysis revealing that Skype stores user data in an unencrypted, password-less local database, making it vulnerable to data extraction.
Explores a disclosure vulnerability in SQL Server's Row- and Cell-Level Security when implemented with views, demonstrating how protected data can be exposed.
Security flaw exposes database passwords on 1% of CMS sites due to text editor backup files being publicly accessible.
Explains and solves the Oracle SQL error ORA-00922 when changing a user password, highlighting the need to quote passwords starting with numbers.
A technical guide on implementing Row Level Security (RLS) in serverless PostgreSQL to achieve HIPAA compliance for patient data in web applications.
Learn how to design SQL databases to minimize damage during intrusions by using schemas, views, and least-privilege user permissions.