Security

Simulate (Transparent Tablespace Encryption) TDE on Oracle Standard Edition

Introduction The Oracle database Standard Edition do not have the Transparent Tablespace Encryption (TDE) feature which is a part of ASO (Advanced Security), and ASO is availabale only on Entreprise Edition version. But encryption can still be used, with a(…)

Detect XZ Utils CVE 2024-3094 with Tetragon

How to use Tetragon to detect XZ Utils backdoor CVE 2024-3094 before it was known. Apply the Zero Trust security strategy.

Enhance Containers Security – Prevent Encrypted Data Exfiltration with NeuVector

Containers security by preventing encrypted data exfiltration with NeuVector. Implementing zero trust architecture.

Clone Oracle Database configured with Oracle Key Vault (OKV)

How to clone an Oracle Database which is configured to store the TDE (encryption keys) in the Oracle Key Vault (OKV)(…)

Containers Security – Protect Against SSN Exfiltration with NeuVector

Containers security by preventing data exfiltration with NeuVector. French SSN exfiltration can be detected with NeuVector.

SQL Server Security: Ensure that SQL Server service accounts are not a member of the Windows local Administrator group

These last few weeks, I work on a project to check the compliance of an instance with the Center for Internet Security (CIS) document. The Benchmark documentation provides prescriptive guidance to secure SQL Server and I develop a tool(…)

PostgreSQL’s New Milestone in Security: Officially CVE Numbering Authority

The PostgreSQL Community just made a significant leap forward in database security :Postgresql is now a CVE Numbering Authority (CNA). Here is the original announcement about PostgreSQL being added as a CNA on the CVE website.

Oracle Data Redaction or how to hide critical information

Oracle Data Redaction: What It Is and How to use it. A quick example usage case.

SELinux – how to change the security context

We all know the pain of an “enforced” SELinux that is overly suspicious and blocks our applications. Typically, when issues arise, we tend to search for solutions everywhere except within the /var/log/audit/audit.log or /var/log/audit directories. Within the audit logs, we(…)

SQL Server Tips: CMS – Connection Error: -2146893019 Severity: 20

Few days ago, I install new instances SQL Server 2022 and the new SSMS by a customer and when I register the instances in the Central Management Servers (CMS), I was surprise by the error coming from the connection test:(…)