Tag: SQL Security

CHECKDB is a critical for Database Integrity

When Was the Last Known Good DBCC CHECKDB Integrity Check?

Fortunately, DBCC CHECKDB will log each time it completes without finding any errors or corruption in the database. That’s known as the Last Known Good date. Let’s look at three ways you determine the Last Known Good date. We’ll use a T-SQL query, a PowerShell command with dbatools, and the SQL Server Logs via Management Studio.

Let's count the number of SQL Server tempdb files I have

3 Ways to Find Your SQL Server tempdb Data Files

Checking the number of tempdb data files is straightforward. Here are three easy ways: one graphical, one T-SQL, and one PowerShell, so you can use your tools of choice.

Avoid working without a net; implement a SQL Server HADR option

High Availability and Disaster Recovery in SQL Server

We’re often asked about SQL Server High Availability and Disaster Recovery (HADR) options to help customers protect their data and improve their uptime. No surprise there. When a SQL Server provides a critical component of your daily operations you need those databases to be available. Simply put, when a user needs information from the database…
Read more

Vintage databases are not as good as vintage cars

Should I Upgrade SQL Servers that Are Out of Support?

Do All SQL Servers Need to Be Upgraded? Running production systems on a platform that is no longer supported by the vendor is worrisome. If something goes wrong, you’ll no longer be able to call the vendor and receive technical support. But worse, you’ll no longer release updates, fixes, security patches, etc, for the out…
Read more

Hands of a Hacker

Protect Your SQL Server from MrbMiner and Other Malware Attacks

Unfortunately malware attacks attempting to exploit vulnerable SQL Servers are often successful. Last spring, Guardicore announced that the Vollgar attack that was making its way around the internet. Just last month, it was MrbMiner in the news. And there have been countless other attacks targeting SQL Server over the year. So, how can your protect…
Read more

Am I affected by MrbMiner malware?

SQL Server hardware can be powerful. Lots of CPU cores and memory. Just what a crypto miner may need in their quest to generate cryptocurrency. In the case of the MrbMiner exploit, numerous SQL Servers have been exploited with brute-force attacks. These attacks are scanning for servers exposed directly to the internet and are using…
Read more

Vollgar: 6 Scripts to Help Review Your SQL Servers

Last week, Guardicore released information about a newly discovered attack that uses SQL Servers to compromise servers and networks. Here’s a link; I’d really encourage you to read it. The attack known as Vollgar uses a simple brute force attack to gain access to SQL Servers exposed to the internet. It then uses the elevated…
Read more

4 Options Now That Your SQL Server 2008 Is Out of Support

As of July 9, 2019, SQL Server 2008 and SQL Server 2008 R2 have officially passed from Extended Support to No Longer Supported. What does that mean? It means that Microsoft will no longer release any updates for any version of SQL Server 2008. That includes security patches and data integrity fixes. If a hacker…
Read more

Are Your SQL Servers Safe? IIS Attacks Increased 782x in One Quarter

Just when we thought that most cybersecurity attacks came via social engineering, we see this. Attacks on IIS, Microsoft’s web server, increased from 2,000 in Q1 2018 to over 1.7 million in Q2 2018. That’s a mind-boggling 782x increase! This is according to an esentire Security Advisory released last week. Hackers go-to tool of choice? PowerShell was the most commonly…
Read more