Fabiano Amorim in SQL Server How a Microsoft-signed SQL Server stored procedure lets sysadmins bypass disabled xp_cmdshell Discover how a Microsoft-signed system procedure bypasses SQL Server's disabled xp_cmdshell setting - plus detection and mitigation steps for defenders.… 14 September 2026 11 min read 3
Greg Low in SQL Server How to mirror data from SQL Server to Microsoft Fabric: complete guide Learn all about Microsoft Fabric mirroring for SQL Server: how it works, what's new in 2025, setup, limitations, and troubleshooting.… 07 September 2026 9 min read 2
Edward Pollack in SQL Server SQL Server login failures: how to monitor, report, and alert on them (complete guide) Learn how to detect and report SQL Server login failures using T-SQL and xp_readerrorlog. Includes ready-to-use scripts for filtering, aggregating,... 02 September 2026 17 min read 2
Fabiano Amorim in SQL Server Why SQL Server’s default trigger execution model is a security flaw – and what Microsoft should do about it SQL Server triggers execute under the caller's privileges by default - not the creator's. Learn why this design enables privilege... 28 August 2026 12 min read 11
Louis Davidson in SQL Server 9 things I wish SQL Server had (and why they’d matter) A T-SQL veteran's wish list: 9 missing SQL Server features that would simplify auditing, data validation, graph queries, and error... 24 August 2026 21 min read 41
Fabiano Amorim in Security, Privacy & Compliance How Azure Arc allows a DB admin to become SQL Server sysadmin – the vulnerability explained Learn how db_ddladmin permissions plus Azure Arc's SQL extension create a confused-deputy attack path to sysadmin — and how to... 21 August 2026 27 min read 31
Greg Low in SQL Server JSON indexing in SQL Server 2025: how it works and current limitations SQL Server 2025 introduces native JSON indexing via CREATE JSON INDEX. Learn how it works, when to use it, and... 19 August 2026 8 min read 6
Greg Low in SQL Server How to avoid nested REPLACE functions with TRANSLATE in SQL Server Learn how SQL Server's TRANSLATE function replaces messy nested REPLACE statements. Simplify multi-character string replacements in T-SQL with one clean... 14 August 2026 4 min read 311
Simple Talk Editor in Resources The full story of PASS Data Community Summit: 25 years of connect, share, and learn PASS Data Community Summit turns 25: from a 1999 Microsoft-backed user group to a global, multi-platform data community. Here's the... 11 August 2026 5 min read 11
Fabiano Amorim in SQL Server msdb attack paths: how to secure SQL Server Agent, triggers, and restores Learn how msdb, SQL Server Agent jobs, triggers, and untrusted restores create privilege escalation paths - plus T-SQL scripts to... 10 August 2026 28 min read 31
Lukas Vileikis in PostgreSQL How to ensure replication stability in PostgreSQL (fix/prevent lag, bloat, and bottlenecks) PostgreSQL replication stability depends on more than just configuration. Learn how replication lag, network bottlenecks, and VACUUM-related issues can silently... 07 August 2026 8 min read 11
Fabiano Amorim in SQL Server How a SQL Server backup can execute attacker code during restore – and how to prevent it (CVE-2026-47295 vulnerability) CVE-2026-47295: a truncation bug in SQL Server's replication cleanup lets a malicious backup execute attacker code as sysadmin during RESTORE... 31 July 2026 22 min read 22
Simple Talk Editor in Career What does a modern DBA actually do? 6 key points from a senior DBA The DBA role has changed. Senior DBA Lee Brownhill shares 6 honest insights on what database professionals are focused on... 29 July 2026 7 min read 31
Edward Pollack in SQL Server SQL Server index tuning: common mistakes and how to fix them Learn the most common SQL Server index tuning mistakes -over-indexing, wide indexes, fill factor misuse, heaps - and how to... 27 July 2026 33 min read 33
Uzma Younas in SQL Server How to get clean, usable data out of SQL Server into Python Build scalable data pipelines by pushing transformations into SQL and keeping Python focused on analysis. Learn about views, CTEs, pruning,... 24 July 2026 11 min read 1
Fabiano Amorim in SQL Server How SQL Server maintenance becomes an attack path – and what to do about it How trigger hijacking, msdb exposure, and over-privileged database users create SQL Server attack paths — plus how to detect and... 17 July 2026 25 min read 2
Greg Low in SQL Server What’s missing in T-SQL? My wish list of features that developers actually need in SQL Server A veteran SQL Server expert's wish list for T-SQL: true constants, enumerations, extensibility, better naming consistency, and more. See what's... 08 July 2026 12 min read 11
Grant Fritchey in Databases I let Copilot build my database. Here’s what I learned – and everything I’d do differently next time (part two) What happens when Microsoft Copilot designs a PostgreSQL schema for Azure? Here's what it got right, what it got wrong,... 29 June 2026 23 min read 1
Edward Pollack in SQL Server 5 T-SQL features that should already exist (2026 SQL Server wish list) 2026 T-SQL wish list covering native Parquet imports, arrays, OVERLAPS, simpler licensing, and cloud storage — features SQL Server still... 26 June 2026 14 min read 41
Fabiano Amorim in SQL Server Exposing a SQL injection vulnerability you’ve never heard of (what it is, how it works, and key takeaways) How a Unicode lookalike character bypassed REPLACE-based sanitization in a trusted SQL Server system procedure - and what it teaches... 19 June 2026 11 min read 31
