Why Postgres needs better connection security defaults - Neon
In this post: why are Postgres connections with sslmode=require insecure? How does Neon ensure secure connections? And what needs to happen to make secure Postgres connections the norm?
PG_MEM: A Malware Hidden in the Postgres Processes
Nautilus researchers have uncovered a new malware, that forces its way into PostgreSQL databases, delivers payloads to hide its operations.
PostgreSQL bug played key role in zero-day Treasury attack
High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further
timescale/pgspot: Spot vulnerabilities in postgres SQL scripts
Spot vulnerabilities in postgres SQL scripts. Contribute to timescale/pgspot development by creating an account on GitHub.
HexaCluster/pgdsat: PostgreSQL Database Security Assessment Tool
PostgreSQL Database Security Assessment Tool.
PostgreSQL: PostgreSQL is now a CVE Numbering Authority (CNA)
The PostgreSQL Security team is pleased to announce that PostgreSQL is now a CVE Numbering Authority (CNA). A CNA has …
How to Audit a PostgreSQL Database | Severalnines
Auditing is required for many security regulations and it is also useful if you want to know what happened in your database, and when and who was responsible for that. In this blog, we will see what pgAudit is and how to audit your PostgreSQL database using it.
PGMiner: PostgreSQLを介して配信される新しい暗号通貨マイニングボットネット
michelp/pgsodium: Modern cryptography for PostgreSQL using libsodium.
Modern cryptography for PostgreSQL using libsodium.
Using “Row Level Security” to make large companies more secure - Cybertec
How to use row level security to restrict internal access to PostgreSQL databases. How to configure access restrictions dynamically.
A Deep Dive into Database Attacks [Part III]: Why Scarlett Johansson’s Picture Got My Postgre Database to Start Mining Monero
A Deep Dive into Database Attacks [Part III]: Why Scarlett Johansson’s Picture Got My Postgres Database to Start Mining Monero
Total security in a PostgreSQL database
IBM Developer is your one-stop location for getting hands-on training and learning in-demand skills on relevant technologies such as generative AI, data science, AI, and open source.