Guarding Against SQL Injection at the Database Layer (SQL Server)

This article presents a way to check and validate input before using it in your dynamic SQL queries to prevent SQL Injection problems.

Microsoft Security Changes and SQL Server

Windows is changing its security, which will affect SQL Server.

Exploiting SQL Server Date Correlation Optimization: How Tampered Backups Enable Cross-Database Data Leaks

This article is a follow-up to SQL Server DBaaS Vulnerability: Decrypting System Code & Exfiltrating User Data, in which we saw some vulnerabilities that affected pretty much all DBaaS offerings available in the cloud. Now, we’ll look at another vulnerability that once again affects every major cloud vendor.

SQL Server Privilege Escalation via Replication Jobs

Learn how attackers can exploit SQL Server replication cleanup jobs to escalate privileges from db_owner to sysadmin

Which Result II

Which Table I

15 Practical Tips for Securing SQL Server

Securing SQL Server isn’t complicated, but it does require consistent attention to the areas where real risks arise, such as privileges, configuration, encryption, patching, and monitoring. This article outlines 15 practical, high-impact steps you can take to harden your SQL Server environment.

Your Security Checkup

We often find security issues come from holes in the way we've set up systems. Steve asks if you perform security checkups on your systems.

Automating SQL Server Access Review

Learn how you can automate checks and reports to l...

The User Login