Database security

Get the latest database security news, tips and information for Oracle, IBM DB2, and Microsoft's SQL Server and more. Learn about database security gateways, database encryption and the simple steps that can eradicate database vulnerabilities.

July 20, 2018 20 Jul'18
Critical Cisco vulnerabilities patched in Policy Suite

News roundup: Critical Cisco vulnerabilities in Policy Suite products were patched this week. Plus, Venmo's API is set to public, exposing a trove of customer data, and more.
December 05, 2017 05 Dec'17
Keyboard data leak exposes millions of personal records

A keyboard data leak by mobile developer Ai.type exposed millions of personal records through misconfigured MongoDB database settings.
May 13, 2016 13 May'16
DHS warns on actively exploited SAP Java vulnerability

DHS US-CERT warns of a patched SAP Java vulnerability from 2010 that has enabled breaches at three dozen global enterprises due to configuration issues.
October 22, 2015 22 Oct'15
Experts say Oracle patches need to be faster

Oracle patches 154 flaws in its quarterly update. Experts said patches need to be released faster, but Oracle stands by its release schedule.

Bring yourself up to speed with our introductory content

Database protection methods expand to shield data from attackers

Database vendors have beefed up the security tools in their software -- and that's a good thing because attackers are increasingly targeting database systems to steal sensitive data. Continue Reading
MD5

The MD5 hashing algorithm is a one-way cryptographic function that accepts a message of any length as input and returns as output a fixed-length digest value to be used for authenticating the original message. Continue Reading
Data obfuscation techniques: Best practices and design approaches

Expert Ajay Kumar revisits the topic of data obfuscation techniques and explores the architectures, approaches and best practices for protecting enterprise data. Continue Reading

Weigh the pros and cons of technologies, products and projects you are considering.

How does TLBleed abuse the Hyper-Threading feature in Intel chips?

TLBleed exploits Intel's HTT feature to leak data via side-channel attacks. Learn about how TLBleed obtains sensitive memory information from expert Michael Cobb. Continue Reading
Database security issues shadow distributed data architectures

As companies distribute data across various platforms, they may need to pay more attention to securing it in databases and other repositories where security is far from baked in. Continue Reading
How data obfuscation techniques can help protect enterprises

Data obfuscation techniques can help enterprises protect corporate information and limit risks of data exposure or leaks. Expert Ajay Kumar explains how these techniques work. Continue Reading

Learn to apply best practices and optimize your operations.

Picking the right focus for web application security testing

Deciding which web applications on which to focus application security testing is a challenging task. Read this list of considerations to ensure you're addressing the right areas. Continue Reading
How criticality analysis benefits from an entropy engineer

NIST published 'Criticality Analysis Process Model: Prioritizing Systems and Components' to guide organizations when prioritizing systems. Discover the key processes with Judith Myerson. Continue Reading
What effect does GDPR have on the WHOIS database?

With GDPR in effect, ICANN proposed redacting information from the WHOIS database. Expert Michael Cobb discusses what this could mean for the domain database. Continue Reading

We’ve gathered up expert advice and tips from professionals like you so that the answers you need are always available.

Rising database security threats require attention -- and action

Data management teams are asking more questions about data security, Gartner analyst Merv Adrian says in a Q&A. But new factors are complicating the process of securing databases, he adds. Continue Reading
Protecting data on the go

Ever since the dawn of the BYOD era, personal and business data have comingled. Enterprise security pros need to not only secure company-owned devices; they must also protect the business data that ends up, inevitably, on smartphones, tablets and ... Continue Reading
Three steps to better mobile app security

Better mobile app security in the enterprise starts with a few steps -- protect data confidentiality, integrity and access. Continue Reading