SQL Server Security: 3 Homework Assignments to Start Today

June 30, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Thanks

SQL Injection: Deconstructing an Attack

June 29, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. As

Enhancing SQL Server Security: Reviewing and Optimizing Audits

June 28, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Audits

What the SQL Server TDE Certificate Expiration Date Does (and does not) Mean

June 26, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Transparent

xp_cmdshell in SQL Server: Risks, Security & Safer Options

June 25, 2024

xp_cmdshell lets SQL Server run OS commands. That’s powerful (and dangerous.) It expands the blast radius of a SQL compromise. In most shops, it should be disabled, with rare, auditable exceptions and safer substitutes for routine admin tasks. Lets unpack that here – and visit our sp_CheckSecurity page to learn about our free SQL Server

Fixing SQL Server Vulnerabilities With GDRs

June 24, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. For

The Case for Auditing Your SQL Server Login Failures

June 23, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Login

Understanding and Managing SQL Server Error Log

June 22, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. SQL

OLE Automation: Just As Much Vulnerability As xp_cmdshell

June 21, 2024

This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. It’s

Next