Security

Data Anonymization as a Service with Delphix Continuous Compliance

Context In the era of digital transformation, attack surfaces are constantly evolving and cyberattack techniques are becoming increasingly sophisticated. Maintaining the confidentiality, integrity, and availability of data is therefore a critical challenge for organizations, both from an operational and a(…)

Setting up TLS encryption and authentication in MongoDB

When securing a MongoDB deployment, protecting sensitive data is paramount. MongoDB supports encryption throughout the lifecycle of the data, with three primary types of data encryption : Encryption in transit Encryption at rest Encryption in use Among these, encryption in(…)

Scheduling OpenSCAP reports in SUSE Multi-Linux Manager

As we’ve recently supported some customers on SUSE Multi Linux Manager I’d like share something which was not as easy to implement as it appeared to be in the first place. But first of all, what(…)

Different types of Oracle wallets

In this blog post I will explain the different types of Oracle wallet with the auto_login feature. What is an Oracle Wallet An Oracle wallet is used to store certificates for Listeners with https protocol, or it can be used(…)

Setting up Microsoft Defender & Arc on Linux

Before we explore Microsoft Defender & Arc, I must clarify: Setting up Microsoft Defender and Arc on a Linux server, especially one without internet access and with robust security monitoring and hardening, may seem counterintuitive. However, because the software(…)

dbo vs. db_owner in SQL Server – What are the differences between them?

During the last years working with customers and teaching them in security topics, I realised that a lot of DBAs are not familiar with or aware of the differences between the two “owner” existing in SQL Server. That’s why I(…)

Offloading PostgreSQL Backups to Azure Blob Storage Using PGBackRest, Managed Identity, and SAS Tokens

Introduction One of the nice things with cloud providers is the low costs of their storage. Whenever you want to optimize your long-term backups and push them on Azure, you might face a wall of questions on how to do(…)

Postgresql Security with Builtin Roles and functions.

Introduction As PostgreSQL continues to gain traction in enterprise-grade applications, I am increasingly tasked and asked about implementing robust security policies. And, as most current DBA positions are multi-systems nowadays, I wanted to make a quick summary on roles and(…)

Simulate (Transparent Tablespace Encryption) TDE on Oracle Standard Edition

by Alexandre Nestor Introduction The Oracle database Standard Edition do not have the Transparent Tablespace Encryption (TDE) feature which is a part of ASO (Advanced Security), and ASO is availabale only on Entreprise Edition version. But encryption can still be(…)

Detect XZ Utils CVE 2024-3094 with Tetragon

How to use Tetragon to detect XZ Utils backdoor CVE 2024-3094 before it was known. Apply the Zero Trust security strategy.