#databasesecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #databasesecurity, aggregated by home.social.
-
New security, maintenance and analytics features for Azure Database for PostgreSQL
#PostgreSQL #AzurePostgreSQL #MicrosoftAzure #DatabaseSecurity #DatabasePerformance #CloudDatabase #DataAnalytics
https://techcommunity.microsoft.com/blog/adforpostgresql/announcing-new-security-maintenance-and-analytics-features-for-postgresql-at-mic/4524559?wt.mc_id=DP-MVP-4015656 -
New security, maintenance and analytics features for Azure Database for PostgreSQL
#PostgreSQL #AzurePostgreSQL #MicrosoftAzure #DatabaseSecurity #DatabasePerformance #CloudDatabase #DataAnalytics
https://techcommunity.microsoft.com/blog/adforpostgresql/announcing-new-security-maintenance-and-analytics-features-for-postgresql-at-mic/4524559?wt.mc_id=DP-MVP-4015656 -
Oh, Sturdy Statistics, the fearless warriors of "Defense in Depth" ⚔️, here to remind us that trusting your database is like trusting a toddler with your tax returns. 🤹♂️ But don't worry, they've got a blog post to solve all your problems by explaining in great detail how NOT to do it! 🙄
https://blog.sturdystatistics.com/posts/api_keys/ #SturdyStatistics #DefenseInDepth #DatabaseSecurity #TrustIssues #BlogPost #HackerNews #ngated -
Oh, Sturdy Statistics, the fearless warriors of "Defense in Depth" ⚔️, here to remind us that trusting your database is like trusting a toddler with your tax returns. 🤹♂️ But don't worry, they've got a blog post to solve all your problems by explaining in great detail how NOT to do it! 🙄
https://blog.sturdystatistics.com/posts/api_keys/ #SturdyStatistics #DefenseInDepth #DatabaseSecurity #TrustIssues #BlogPost #HackerNews #ngated -
Security Flaws Exposed in Popular Database Projects' MCP Servers
Critical security flaws have been uncovered in MCP servers used by popular analytics databases, leaving them vulnerable to risks like SQL injection and full database takeover due to faulty validation and authentication processes. These defects, discovered by Akamai security analyst Tomer Peled, highlight a…
#VulnerabilityResearch #McpServers #DatabaseSecurity #AiApplications #ModelContextProtocol
-
US Agencies Deploy Biometric Glasses, Sparking Surveillance Fears
Imagine a pair of smart glasses that can scan faces and instantly match them to records in multiple federal databases, raising serious concerns about surveillance and personal privacy. This technology, powered by facial recognition and other biometric signals, has sparked fears about the potential for real-time…
#BiometricSurveillance #FacialRecognition #EmergingThreats #UsGovernment #DatabaseSecurity
-
Moltbook, a week-old social network for AI agents, exposed 6,000+ user emails and over a million API keys through an open database, according to Wiz researchers. The creator boasted about writing "zero code" for the platform. The breach highlights security risks when AI generates software without proper configuration oversight. Vulnerability now patched.
-
Moltbook, a week-old social network for AI agents, exposed 6,000+ user emails and over a million API keys through an open database, according to Wiz researchers. The creator boasted about writing "zero code" for the platform. The breach highlights security risks when AI generates software without proper configuration oversight. Vulnerability now patched.
-
Fuzzing PostgreSQL at the front door 🔍
Adam Wołk Microsoft shows how fuzzing uncovers edge-case bugs in libpq and #PgBouncer. Learn how to build harnesses, mutate protocol inputs, and harden Postgres networking code against real-world failures. https://p2d2.cz/en/talks/knocking_at_the_door_fuzzing_libpq_and_pgbouncer/
#libpq #Fuzzing #DatabaseSecurity #PostgresDev#OpenSource #DBA #DeveloperTools
-
Fuzzing PostgreSQL at the front door 🔍
Adam Wołk Microsoft shows how fuzzing uncovers edge-case bugs in libpq and #PgBouncer. Learn how to build harnesses, mutate protocol inputs, and harden Postgres networking code against real-world failures. https://p2d2.cz/en/talks/knocking_at_the_door_fuzzing_libpq_and_pgbouncer/
#libpq #Fuzzing #DatabaseSecurity #PostgresDev#OpenSource #DBA #DeveloperTools
-
Automate safe database copies for devs. MaskDump anonymizes emails & phones in huge SQL dumps via pipelines. Compare tools, see configs. https://hackernoon.com/from-production-to-dev-safe-database-copies-with-maskdump #databasesecurity
-
Automate safe database copies for devs. MaskDump anonymizes emails & phones in huge SQL dumps via pipelines. Compare tools, see configs. https://hackernoon.com/from-production-to-dev-safe-database-copies-with-maskdump #databasesecurity
-
MongoDB Server Security Update, December 2025
https://www.mongodb.com/company/blog/news/mongodb-server-security-update-december-2025
#HackerNews #MongoDB #Security #Update #December2025 #ServerUpdate #DatabaseSecurity
-
MongoDB Server Security Update, December 2025
https://www.mongodb.com/company/blog/news/mongodb-server-security-update-december-2025
#HackerNews #MongoDB #Security #Update #December2025 #ServerUpdate #DatabaseSecurity
-
A high-severity flaw known as MongoBleed (CVE-2025-14847) is currently being exploited in the wild.
The scale is significant:
🔍 Wiz researchers have confirmed active exploitation.
📊 Data from Shodan and Censys reveals between 87,000 and 100,000 potentially vulnerable MongoDB instances.Read More: https://www.security.land/mongobleed-alert-cve-2025-14847-exploited-in-the-wild/
#SecurityLand #CyberSecurity #InfoSec #MongoDB #MongoBleed #DatabaseSecurity #Wiz #Shodan #Censys #CloudSecurity
-
Tired of wrestling with TLS certs and CAs for your database? MariaDB 11.8's zero-configuration TLS requires no manual setup 🚀
Check out security management tips at
https://optimizedbyotto.com/post/zero-configuration-tls-mariadb-11.8/
#MariaDB #DatabaseSecurity #OpenSource -
Tired of wrestling with TLS certs and CAs for your database? MariaDB 11.8's zero-configuration TLS requires no manual setup 🚀
Check out security management tips at
https://optimizedbyotto.com/post/zero-configuration-tls-mariadb-11.8/
#MariaDB #DatabaseSecurity #OpenSource -
pgAdmin CVE-2025-9636 vulnerability enables OAuth session hijacking, threatening PostgreSQL database security. Database administrators must prioritize pgAdmin 9.8 upgrade immediately. Essential reading for cybersecurity professionals.
#SecurityLand #CyberWatch #Cybersecurity #PostgreSQL #DatabaseSecurity #CVE #OAuth #pgAdmin
-
pgAdmin CVE-2025-9636 vulnerability enables OAuth session hijacking, threatening PostgreSQL database security. Database administrators must prioritize pgAdmin 9.8 upgrade immediately. Essential reading for cybersecurity professionals.
#SecurityLand #CyberWatch #Cybersecurity #PostgreSQL #DatabaseSecurity #CVE #OAuth #pgAdmin
-
Everything About SQL Injection 💉
What is SQL Injection?
SQL Injection is a web vulnerability that lets attackers manipulate database queries. This can lead to unauthorized access, data leaks, or even full control of the system.🔬Types of SQL Injection
1️⃣ Classic SQLi – Injecting raw SQL commands.
2️⃣ Blind SQLi – No errors, but the response changes.
3️⃣ Time-Based SQLi – Uses response delays to extract data.
4️⃣ Union-Based SQLi – Merges malicious queries with valid ones.
5️⃣ Out-of-Band SQLi – Exfiltrates data through DNS, HTTP, etc.♦️Potential Impact
▫️Access & dump sensitive data
▫️Bypass login systems
▫️Alter or delete database entries
▫️Full system compromise🔰Common Entry Points
▫️Login forms
▫️Search inputs
▫️Contact forms
▫️URL query parametersDefense Strategies 🛡
✅ Use parameterized queries
✅ Validate & sanitize inputs
✅ Apply least privilege to DB accounts
✅ Monitor logs for anomalies
✅ Perform regular security audits📀Image Description (for visual):
🔹A sleek cyber-themed layout with:
🔹A hacker icon injecting code
🔹A login form being exploited
🔹Database icons showing exposed data
🔹A shield labeled “Prepared Statements” blocking the attack🔖Tags
#SQLInjection #CyberSecurity #EthicalHacking #WebSecurity #BugBounty #InfoSec #Pentesting #OWASP #DatabaseSecurity #HackerTips⚠️Disclaimer
This content is for educational and ethical purposes only. Do not attempt to exploit vulnerabilities without proper authorization. Always follow legal and ethical guidelines when testing or learning about cybersecurity. -
Everything About SQL Injection 💉
What is SQL Injection?
SQL Injection is a web vulnerability that lets attackers manipulate database queries. This can lead to unauthorized access, data leaks, or even full control of the system.🔬Types of SQL Injection
1️⃣ Classic SQLi – Injecting raw SQL commands.
2️⃣ Blind SQLi – No errors, but the response changes.
3️⃣ Time-Based SQLi – Uses response delays to extract data.
4️⃣ Union-Based SQLi – Merges malicious queries with valid ones.
5️⃣ Out-of-Band SQLi – Exfiltrates data through DNS, HTTP, etc.♦️Potential Impact
▫️Access & dump sensitive data
▫️Bypass login systems
▫️Alter or delete database entries
▫️Full system compromise🔰Common Entry Points
▫️Login forms
▫️Search inputs
▫️Contact forms
▫️URL query parametersDefense Strategies 🛡
✅ Use parameterized queries
✅ Validate & sanitize inputs
✅ Apply least privilege to DB accounts
✅ Monitor logs for anomalies
✅ Perform regular security audits📀Image Description (for visual):
🔹A sleek cyber-themed layout with:
🔹A hacker icon injecting code
🔹A login form being exploited
🔹Database icons showing exposed data
🔹A shield labeled “Prepared Statements” blocking the attack🔖Tags
#SQLInjection #CyberSecurity #EthicalHacking #WebSecurity #BugBounty #InfoSec #Pentesting #OWASP #DatabaseSecurity #HackerTips⚠️Disclaimer
This content is for educational and ethical purposes only. Do not attempt to exploit vulnerabilities without proper authorization. Always follow legal and ethical guidelines when testing or learning about cybersecurity. -
Microsoft SQL Server 2019's final cumulative update (CU31) is out, offering critical bug fixes & improvements before mainstream support ends. Don’t miss this chance to update and ensure your database is ready for the future! #SQLServer #DatabaseSecurity #TechUpdate
-
T-SQL Tuesday 183 – Tracking Permissions http://dlvr.it/THw07p via PlanetPowerShell #SQLServer #TSQLTuesday #Permissions #DatabaseSecurity
-
T-SQL Tuesday 183 – Tracking Permissions http://dlvr.it/THw07p via PlanetPowerShell #SQLServer #TSQLTuesday #Permissions #DatabaseSecurity
-
phpMyAdmin Vulnerability Let Hackers Trigger XSS Attack With Malicious Tables https://cybersecuritynews.com/phpmyadmin-triggers-xss-attacks/ #ComputerSecurityNews #phpMyAdminSecurity #CyberSecurityNews #VulnerabilityNews #DatabaseSecurity #XSSVulnerability
-
phpMyAdmin Vulnerability Let Hackers Trigger XSS Attack With Malicious Tables https://cybersecuritynews.com/phpmyadmin-triggers-xss-attacks/ #ComputerSecurityNews #phpMyAdminSecurity #CyberSecurityNews #VulnerabilityNews #DatabaseSecurity #XSSVulnerability
-
MSSqlPwner: Open-source tool for pentesting MSSQL servers https://www.helpnetsecurity.com/2025/01/17/mssqlpwner-open-source-pentesting-mssql-servers/ #penetrationtesting #databasesecurity #opensource #Don'tmiss #software #GitHub #News
-
MSSqlPwner: Open-source tool for pentesting MSSQL servers https://www.helpnetsecurity.com/2025/01/17/mssqlpwner-open-source-pentesting-mssql-servers/ #penetrationtesting #databasesecurity #opensource #Don'tmiss #software #GitHub #News
-
PostgreSQL Vulnerability Exposes Environment Variables to Hackers
A recent PostgreSQL vulnerability has been making waves in the cybersecurity world, exposing environment variables to potential hackers
#PostgreSQL #CyberSecurity #DataBreach #Vulnerability #Hackers #InformationSecurity #DatabaseSecurity #EnvironmentVariables #TechNews #SecurityAwareness #news
https://cloudhosting.evostrix.eu/postgresql-vulnerability-exposes-environment-variables-to-hackers/ -
New Video Alert: MySQL Server Attacks YOU!
Can a hacker execute code on your laptop by logging into a hacked MySQL server? Alexander Rubin reveals an attack vector where MySQL clients become the target of an attack chain.
#BSidesKnoxville2024 #CyberSecurity #MySQL #Hackers #DatabaseSecurity
https://youtu.be/3iQAQSVdKD0 -
Malware exploits weak passwords in PostgreSQL for cryptojacking - Up to 800,000 internet-connected databases could be vulnerable to crypto... - https://cointelegraph.com/news/pg-mem-malware-targets-postgresql-databases-crypto-mining #cloud-nativesecurity #postgresqldatabases #cryptominingmalware #databasesecurity #pg_memmalware #weakpasswords #cryptojacking #cybersecurity #aquasecurity #miningpool
-
Malware exploits weak passwords in PostgreSQL for cryptojacking - Up to 800,000 internet-connected databases could be vulnerable to crypto... - https://cointelegraph.com/news/pg-mem-malware-targets-postgresql-databases-crypto-mining #cloud-nativesecurity #postgresqldatabases #cryptominingmalware #databasesecurity #pg_memmalware #weakpasswords #cryptojacking #cybersecurity #aquasecurity #miningpool
-
Web-based database management tools like phpMyAdmin are widely used due to their ease of use and accessibility. However, there are significant security and performance reasons why you might want to avoid these tools in favor of desktop-based solutions like DBeaver.
https://linuxexpert.org/do-not-use-phpmyadmin/
#linux #windows #macos #DatabaseSecurity #DBeaver #phpMyAdmin #SecureConnections #SSH #VPN #DatabaseManagement #TechLesson #WebSecurity #RDBMS
-
Web-based database management tools like phpMyAdmin are widely used due to their ease of use and accessibility. However, there are significant security and performance reasons why you might want to avoid these tools in favor of desktop-based solutions like DBeaver.
https://linuxexpert.org/do-not-use-phpmyadmin/
#linux #windows #macos #DatabaseSecurity #DBeaver #phpMyAdmin #SecureConnections #SSH #VPN #DatabaseManagement #TechLesson #WebSecurity #RDBMS
-
Unlock the secrets of PostgreSQL security with Henrietta Dombrovskaya at #SCaLE21x. Learn how to safeguard your data with automation and standardization. Join us March 14-17, 2024, in Pasadena, CA. 🔐🐘 #PostgreSQL #DatabaseSecurity https://www.socallinuxexpo.org/scale/21x/presentations/securing-your-postgresql-data-comprehensive-guide-protecting-your-database
-
🔒 Dive into the world of relational database security! Our latest post unravels the secrets of user authentication and access control in SQL Server, Oracle, MariaDB/MySQL, and PostgreSQL. Perfect for DBAs and devs! #DatabaseSecurity #TechInsights #SQLServer #Oracle #MariaDB #PostgreSQL 🛡️💻
https://compositecode.blog/2023/12/07/security-and-authentication-in-relational-databases/
-
CW: research papers
K. Coby Wang and M. Reiter, "Bernoulli honeywords"¹
Decoy passwords, or ``honeywords,'' planted in a credential database can alert a site to its breach if ever submitted in a login attempt. To be effective, some honeywords must appear at least as likely to be user-chosen passwords as the real ones, and honeywords must be very difficult to guess without having breached the database, to prevent false breach alarms. These goals have proved elusive, however, for heuristic honeyword generation algorithms. In this paper we explore an alternative strategy in which the defender treats honeyword selection as a Bernoulli process in which each possible password (except the user-chosen one) is selected as a honeyword independently with some fixed probability. We show how Bernoulli honeywords can be integrated into two existing system designs for leveraging honeywords: one based on a honeychecker that stores the secret index of the user-chosen password in the list of account passwords, and another that does not leverage secret state at all. We show that Bernoulli honeywords enable analytic derivation of false breach-detection probabilities irrespective of what information the attacker gathers about the sites' users; that their true and false breach-detection probabilities demonstrate compelling efficacy; and that Bernoulli honeywords can even enable performance improvements in modern honeyword system designs.
#arXiv #ResearchPapers #Honeywords #BernoulliHoneywords #DatabaseSecurity
-
Big news! Andreas Wolter shared.. The #AzureSQL Database #STIG was released today.
Download from the DISA website: https://public.cyber.mil/stigs/downloads/ #DatabaseSecurity #DoD