Vlad Drumea
@vladdba.com
Full time MS SQL Server DBA. Curious about InfoSec stuff. Thoughts = my own. https://vladdba.com Maker of https://github.com/VladDBA/PSBlitz
New blog post: In which I cover the process of spinning up an Azure SQL Database container using #QNAP Container Station. vladdba.com/2026/08/02/a... #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
Setting up an Azure SQL DB container in QNAP Container Station
In this post I cover the process of setting up, connecting to and interacting with an Azure SQL DB container in QNAP's Container Station.
vladdba.com
New blog post: In which I cover the process of spinning up an Azure SQL Database container in Podman. vladdba.com/2026/08/02/a... #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
Setting up an Azure SQL DB container in Podman
In this post I cover the process of setting up, connecting to and interacting with an Azure SQL DB container in Podman.
vladdba.com
Exfiltrating data from SQL Server 2025 using sp_invoke_external_rest_endpoint. No xp_cmdshell, no fancy external tools. Exfiltrating login hashes, text & PNG files using WordPress comments as the target REST API endpoint. #sqlserver #sqldba #sql #mvpbuzz #cybersecurity #security #infosec #powershell
Exfiltrate data from SQL Server 2025 with sp_invoke_external_rest_endpoint
How an attacker can take advantage of SQL Server 2025's sp_invoke_external_rest_endpoint to exfiltrate data from a compromised instance.
vladdba.com
New blog post: Querying Shodan's REST API directly from SQL Server using SQL Server 2025's sp_invoke_external_rest_endpoint stored procedure. vladdba.com/2026/07/19/s... #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz #cybersecurity #security #infosec
Querying Shodan with SQL Server's sp_invoke_external_rest_endpoint
In this post I'm querying Shodan's REST API directly from SQL Server using SQL Server 2025's sp_invoke_external_rest_endpoint.
vladdba.com
How many SQL Server instances are exposed to the public internet? I pulled real data from Shodan to find out. Breakdown by version, geography, and organizations. vladdba.com/2026/07/19/i... #sqlserver #sqldba #microsoftsqlserver #mssql #mssqldba #sql #mvpbuzz #cybersecurity #security #infosec
Internet-exposed SQL Server instances and where to find them
In this post I dig through some data that Shodan.io provides for internet-exposed SQL Server instances, their versions and locations.
vladdba.com
With SQL Server 2016 hitting end of extended support, I took a look at some Shodan stats: it looks like, out of a total of 182K instances exposed to the internet (for reasons beyond human comprehension), 2016 RTM barely makes it in the top 10 versions with 3.8K instances. Blog post incoming.
Updated First Responder Kit and Consultant Toolkit for July 2026 From now on, I'm going to be releasing annual versions of the First Responder Kit, starting with this one, which I'm calling the First Responder Kit 2026. I'll still release more frequently on Github, but I won't be blogging about it…
Updated First Responder Kit and Consultant Toolkit for July 2026
From now on, I'm going to be releasing annual versions of the First Responder Kit, starting with this one, which I'm calling the First Responder Kit 2026. I'll still release more frequently on Github, but I won't be blogging about it here. I want to make it easier for folks who don't update that often. I'm also going to be syncing my classes up with the annual releases - for example, …
brentozar.com
Why does accessing the BIOS on a PC/laptop always have to be a quick-time event? Additionally, why can't motherboard and laptop manufacturers agree on one BIOS key?
Favorite and least favorite file formats? Favorite: md Least favorite: doc(x) People who write documentation in Word, especially containing code snippets, hate other people.
Melanie Walsh@mellymeldubs.bsky.social · 3w agoFavorite and least favorite file formats? I'll start. Favorite: TXT Least favorite: HEIC
Last day to register to Brent Ozar's 2026 Live Online Classes with a 50% discount. And you can stack an extra 10% off on top of that. Find out how to claim the exra discount: vladdba.com/2026/06/23/e... #SQLServer #DBA #BrentOzar #DatabasePerformance #TechTraining #sql #performance #mssql #sqldba
New blog post: My third contribution to T-SQL Tuesday, about things that make me instantly think a query is bad. vladdba.com/2026/07/07/t... #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday #azure #azuresql #mvpbuzz
T-SQL Tuesday #200 – things that make me instantly think a query is bad
This month's T-SQL Tuesday invitation comes from Brent Ozar, and it's titled "When I’m looking at a query, I bet it’s bad if I see __.".
vladdba.com
8 days left to take advantage of Brent Ozar's 2026 Live Online Classes 50% discount (ends July 10). And you can stack an extra 10% off on top of that. Find out how to claim the exra discount: vladdba.com/2026/06/23/e... #SQLServer #DBA #BrentOzar #DatabasePerformance #TechTraining
"Developers want to add a new column every day. VARCHARs" "The integrity of our data is very important, not to me personally (I couldn't care less), but for our company to survive." This clip got a good chuckle out of me 😅 #sql #mssql #sqlserver #dba
Interview with a DBA (Database Administrator)
YouTube video by Kai Lentit
youtube.com
Recently updated post: In which I demonstrate why using heaps in SQL Server for anything other than staging tables comes with real, measurable costs. If you didn't get a chance to attend my session at Data Saturday Croatia 2026, then this is the next best thing. #sqlserver #sqldba #mssql #mssqldba
The hidden costs of heaps in SQL Server
In this post I cover some unpleasant side-effects of using heaps in SQL Server for anything else than staging tables.
vladdba.com
Brent Ozar's 2026 Live Online Classes are open for registration with a 50% discount (ends July 10). You can stack an extra 10% off on top of that already-deep discount. Find out how to claim the discount: vladdba.com/2026/06/23/e... #SQLServer #DBA #BrentOzar #DatabasePerformance #TechTraining
Get an Extra 10% Off Brent Ozar's Live Classes
Save big on Brent Ozar's Live classes: 50% off launch pricing plus an exclusive 10% extra discount code. See how much you can save.
vladdba.com
New blog post: On my experience as a first time speaker at a Data Saturday conference at Data Saturday Croatia 2026. vladdba.com/2026/06/23/a... #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
From Attendee to Speaker: My first Data Saturday session
In this post I cover my experience as a first time speaker at a Data Saturday conference at Data Saturday Croatia 2026.
vladdba.com
Signal’s Meredith Whittaker: The Push for Online Safety Risks Mass Surveillance Interview by Mishal Hussain The president of the encrypted messaging app says autonomous AI agents, device scanning and digital advertising are converging into a new architecture of surveillance.
Signal's Meredith Whittaker: The Push for Online Safety Risks Mass Surveillance
The president of the encrypted messaging app says autonomous AI agents, device scanning and digital advertising are converging into a new architecture of surveillance.
bloomberg.com
My blog's "About Me" page was getting a bit stale, so I gave it a refresh to better reflect my work with SQL Server, security, and automation. Check out the new version here: vladdba.com/vlad-drumea/ #SQLServer #DBA #InfoSec #AzureSQL #SQL #PowerShell #MVPBuzz
About Vlad Drumea
Vlad Drumea is an accomplished SQL Server DBA, Data Platform MVP & MCSE with over 14 years of experience, with a focus on performance tuning.
vladdba.com
If you've been on the fence about Brent's Anniversary Sale, use this link for an extra 10% off the already discounted prices: vladdba.com/2026/06/08/b...
Brent Ozar@brento.bsky.social · 2mo agoToday's the last day of our annual Anniversary Sale! www.brentozar.com/training/ Get my SQL Server Fundamentals Bundle for $229, or Mastering for $579.
Very interesting thought piece. "Being open to the possibility that LLMs are conscious is the same as being open to the possibility that Microsoft Word is conscious" No, Artificial Intelligence Is Not Conscious www.theatlantic.com/philosophy/2...
No, Artificial Intelligence Is Not Conscious
Taken to its logical conclusion, this line of thinking is absurd—and damning.
theatlantic.com
Next week I'm heading to Data Saturday Croatia 2026. Session: "A Heap of Trouble: The Hidden Costs of Heaps in SQL Server" If you're there, come say hello! datasaturdays.com/Event/202606... #DataSaturday #DataSaturdayCroatia #SQLServer #MSSQL #DBA #SQL #MVPBuzz
PSBlitz 6.1.0 is live: New checks for Backups (RPO/RPO est.) & Instance Security (beta). ImportExcel support Up to 70% faster Excel exports Retry logic for transient errors Read the full breakdown: vladdba.com/2026/05/28/p... Repo: github.com/VladDBA/PSBl... #sqlserver #powershell #dba #MVPBuzz
PSBlitz 6.1.0: new backup and security checks, Excel improvements
PSBlitz 6.1.0 is out; it brings new backup and security checks, improved Excel performance, support for ImportExcel PowerShell module.
vladdba.com
New blog post: In which I cover and demo SQL Server roles and permissions that are viable avenues for privilege escalation to sysadmin. vladdba.com/2026/05/22/s... #sqlserver #sqldba #microsoftsqlserver #hashcat #cybersecurity #infosec #sql #mvpbuzz
SQL Server permissions that can lead to privilege escalation
In this post I cover SQL Server roles and permissions that can act as viable avenues for privilege escalation to sysadmin.
vladdba.com
Your doctor’s AI notetaker may be making things up, Ontario audit finds arstechnica.com/health/2026/...
Your doctor’s AI notetaker may be making things up, Ontario audit finds
Made-up therapy referrals, incorrect prescriptions among the common mistakes.
arstechnica.com
🚨New Microsoft MVP Alert🚨 Vlad Drumea Award Category: Data Platform Technology Area: Tools & Connectivity,SQL Server (on Windows, Linux, Containers) Country: Romania
Blog post from the past: In which I go over potential reasons for why some special characters end up corrupted and displayed as question marks, squares or something completely different in SQL Server. vladdba.com/2024/10/04/c... #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba
Characters displayed as question marks or squares in SQL Server
In this post I'm going over potential reasons why some characters end up displayed as question marks or squares in SQL Server.
vladdba.com
Recently updated post: In which I discuss the risks of improperly configured SQL Server linked server connections and provide recommendations for securing them. Now with a query to identify improperly configured linked server connections. #sqlserver #sqldba #mssqlserver #mssql #mssqldba #security
Securing SQL Server linked servers
In this post I address improper security configurations and their impact, as well as recommendations for securing SQL Server linked servers.
vladdba.com
