Database Security Best Practices That Survive Real Incidents

Bishop Fox's red team lead flags five recurring mistakes — poor secrets management, excessive privileges, flat networks, user-training over-reliance, weak detections — seen in ~90% of engagements.

Second post in the AWS security series covers host hardening: EBS encryption caveats (use per-volume keys), the principle of least privilege, and treating cloud VMs like physical servers.

GitLab Secrets Manager, built on OpenBao, adds External Secrets Operator, Terraform and API support—so CI/CD, Kubernetes and IaC pull secrets from a single store that syncs rotations automatically.

A code review found 30 hardcoded database passwords across 20 accounts; the article shows how flaws like XXE turn leaked source into direct DB access and outlines safer secret distribution options.

Secure database configurations are important. However, many database administrators fail to lock down accounts that are used by trusted services.

SQL injection vulnerabilities are common out in the real world.