Tag archive
What product fingerprint counts for MongoDB, Elasticsearch, Solr and other data stores do and do not prove, and why authentication rather than reachability is the finding that matters.
Roughly 555,000 reachable Redis, MySQL and PostgreSQL default ports, and why Redis accounts for 90% of them.
ZoomEye measurement of DevOps and data platform exposure, with interpretation of default-configuration risk.
Originally published at norvik.tech Introduction Explore how enterprise security is...
5,873,669 listening services on port 1433, read against a seven-year-old SQL Server remote code execution flaw that returned to the KEV catalog in 2026.
Quick Answer: SQL injection attacks exploit vulnerabilities in how web applications construct...
Google's managed Postgres is adding IAM group authentication in preview, mapping Cloud Identity and Workforce Identity Federation groups to database roles. The point is not the passwordless slogan: it is that AI agents can finally carry a real end-user identity all the way to the row filter.
Secure Remote MySQL with DBeaver: SSH Tunneling Without Opening Port 3306 I almost forgot...
Explore advanced database security testing techniques and practical tips for protecting sensitive data.
Originally published at norvik.tech Introduction Explore the implications of unsecured...
Originally published at norvik.tech Introduction Explore the critical implications of...
Postgres MCP Server: How to Connect Your Database to AI Agents (and What to Lock Down...