MS15-058: Vulnerabilities in SQL Server could allow remote code execution

A vulnerability has been released that can affect SQL Server 2008, 208 R2, 2012, and 2014.

Grant User Access to All SQL Server Databases

Consider a situation when you have a large number of databases on your SQL Server, and you are requested to grant user access to all SQL Server databases. How can you grant access to a user for all databases on a SQL Server instance?

DBCC InputBuffer Permissions

Hack Us

A challenge from United intrigues Steve Jones. How many other companies would make a challenge like this?

Default Endpoint Encryption

PCI Best Practices Guide for SQL Server DBAs

Tibor Nagy has put together some best practices to help SQL Server DBAs navigate the many different requirements around PCI compliance.

How to Get SQL Server Security Horribly Wrong

It is no good doing some or most of the aspects of SQL Server security right. You have to get them all right, because any effective penetration of your security is likely to spell disaster. If you fail in any of the ways that Robert Sheldon lists and describes, then you can't assume that your data is secure, and things are likely to go horribly wrong.

The Opportunistic Hacker

Sometimes the crimes of opportunity might be the worst ones for our data.

Stairway to SQL Server Security Level 7: Security Across Databases with Cross-Database Ownership Chaining

Sometimes you need to reach outside a database and access data and objects from multiple databases, which raises some security issues and increases the complexity of data access. In this stairway level, you’ll learn about cross-database ownership chaining so that you can reach across database boundaries securely.

Source Code Security

The code you use may contain security information. Be extra careful in this case, especially when you use encryption.