In a previous blog, I presented how to set up a distribution path between two GoldenGate deployments both secured with NGINX. The method I used there was purely through the Web UI. But GoldenGate also exposes a full REST API, and everything you can do in the UI can be done through the API as well, which is useful for…
Since version 7.0.11, MongoDB natively supports OpenID Connect (OIDC) authentication. This move was part of MongoDB’s cloud strategy, since cloud environments use OIDC a lot for authentication and authorization. In version 8.0, MongoDB deprecated LDAP authentication and authorization, making it clear that OIDC is the future for MongoDB authentication. In this blog, I will present how to set up OIDC…
Why one layer is never enough, why dev environments are your biggest GDPR gap, and how to industrialize their governance.
One of the most impactful (and often underestimated) differences between JBoss EAP 7.4 and JBoss EAP 8 is how credentials are handled. This is not just a documentation tweak or a recommendation shift. It is a hard security enforcement change driven by modern platform standards and compliance expectations from Red Hat. If you remember only one thing from this article,…
Encryption-in-transit is part of the essential security baseline for SQL Server.Without TLS, TDS packets travel in clear text across the network, making them vulnerable to interception or modification by an attacker attempting to gain access to the system.This is why TLS has become a standard in modern SQL Server architectures. In this article, we will look at how to standardize…
Yesterday I participated to the Oracle Technology Roundtable for Digital Natives in Zurich. It was a good opportunity to learn more about AI, Cloud and HeatWave with the focus on very trendy features of this product: generative AI, machine learning, vector processing, analytics and transaction processing across data in Data Lake and MySQL databases. It was also great to share…
In the previous blogs, I explained the difference between Credential Store and Password Vault (Credential Store vs Password Vault), and I share how to secure your sensitive strings with Password Vault. Today, one more blog to give the whole view, how to use Credential Store in JBoss EAP! What is the Credential Store? Introduced with the elytron subsystem, credential stores…
by Alexandre Nestor Introduction The Oracle database Standard Edition do not have the Transparent Tablespace Encryption (TDE) feature which is a part of ASO (Advanced Security), and ASO is availabale only on Entreprise Edition version. But encryption can still be used, with a little developpement effort.$ The test platform I have an Oracle 19c SE2 version with one pdb (PDB11).…
How to use Tetragon to detect XZ Utils backdoor CVE 2024-3094 before it was known. Apply the Zero Trust security strategy.
Containers security by preventing encrypted data exfiltration with NeuVector. Implementing zero trust architecture.
Containers security by preventing data exfiltration with NeuVector. French SSN exfiltration can be detected with NeuVector.
Oracle Data Redaction: What It Is and How to use it. A quick example usage case.
