Featured
MySQL 5.7
Support
Compare Percona to Leading Database Solutions
Percona Products
Percona Services
Use Cases
June 17, 2016
MongoDB Security: Why Pay for Enterprise when Open Source Has You Covered?
Does ensuring MongoDB security justify the cost of the Enterprise version? In my opinion, the answer is no. MongoDB Inc© blasted [...]
February 4, 2016
MySQL password expiration features to help you comply with PCI-DSS
password_expired feature which allows to set a user’s password as expired. This has been added to the mysql.user table and [...]
January 14, 2016
OpenSSH CVE-2016-0777: Details and Mitigation
Earlier today advisories were sent out regarding OpenSSH versions 5.4 through 7.1., informing users about a security bug in the [...]
September 14, 2015
MongoDB and Percona TokuMX Security Guidelines
Several reports we’re published in the news about how easy it is to access data stored in some NoSQL systems, [...]
June 26, 2015
Tips for avoiding malware from a lesson learned
In a recent article on the Percona blog, I recommended readers to a tool called CamStudio for making technical screen [...]
May 18, 2015
Percona security update: oCERT and SSL improvements
We have recently become a member of oCERT to aid in allowing responsible disclosure for Percona products and services as [...]
May 6, 2015
Percona Security Advisory CVE-2015-1027
Contents Summary Analysis Mitigating factors P.O.C Acknowledgments Summary During a code audit performed internally at Percona, we discovered a viable [...]
March 5, 2015
How to test if CVE-2015-0204 FREAK SSL security flaw affects you
The CVE-2015-0204 FREAK SSL vulnerability abuses intentionally weak “EXPORT” ciphers which could be used to perform a transparent Man In The [...]
January 29, 2015
GHOST vulnerability (CVE-2015-0235) Percona response
Cloud security company Qualys announced Tuesday the issues prevalent in glibc since version 2.2 introduced in 2000-11-10 (the complete Qualys [...]
December 23, 2014
File carving methods for the MySQL DBA
This is a long overdue blog post from London’s 44con Cyber Security conference back in September. A lot of old memories [...]
November 25, 2014
(More) Secure local passwords in MySQL 5.6 and up
I log into a lot of different servers running MySQL and one of the first things I do is create [...]
October 15, 2014
How to close POODLE SSLv3 security flaw (CVE-2014-3566)
Padding Oracle On Downgraded Legacy Encryption First off, the naming “convention” as of late for security issues has been terrible. The [...]
May 20, 2014
Database auditing alternatives for MySQL
Database auditing is the monitoring of selected actions of database users. It doesn’t protect the database in case privileges are [...]
April 9, 2014
Heartbleed: Separating FAQ From FUD
If you’ve been following this blog (my colleague, David Busby, posted about it yesterday) or any tech news outlet in [...]
March 25, 2014
Database security: Why should you review yours?
Ah database security… the black sheep of topics and something you would really rather not have to deal with right? [...]
March 19, 2014
Hardening your Cacti setup
If you are using Percona Monitoring Plugins for Cacti, this article should be important to you. By default, the Cacti [...]
November 18, 2013
MySQL encryption performance, revisited
This is part two on a two-part series on the performance implications of in-flight data encryption with MySQL. In the [...]