New blog post:
On my experience as a first time speaker at a Data Saturday conference at Data Saturday Croatia 2026.
https://vladdba.com/2026/06/23/attendee-speaker-data-saturday/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
From Attendee to Speaker: My first Data Saturday session

In this post I cover my experience as a first time speaker at a Data Saturday conference at Data Saturday Croatia 2026.

VladDBA

PSBlitz 6.1.0 is live
New checks for Backups (RPO/RPO est.) & Instance Security (beta).
ImportExcel support
Up to 70% faster Excel exports
Retry logic for transient errors

Read the full breakdown: https://vladdba.com/2026/05/28/psblitz-6-1-0-backup-security-checks-excel-performance/
Repo: https://github.com/VladDBA/PSBlitz

#sqlserver #sqldba #powershell #microsoftsqlserver #mssqlserver #mssql #mssqldba #dba #PSBlitz #MVPBuzz

PSBlitz 6.1.0: new backup and security checks, Excel improvements

PSBlitz 6.1.0 is out; it brings new backup and security checks, improved Excel performance, support for ImportExcel PowerShell module.

VladDBA
New blog post:
In which I cover and demo SQL Server roles and permissions that are viable avenues for privilege escalation to sysadmin.
https://vladdba.com/2026/05/22/sql-server-permission-privilege-escalation/
#sqlserver #sqldba #microsoftsqlserver #hashcat #cybersecurity #infosec #sql #mvpbuzz
SQL Server permissions that can lead to privilege escalation

In this post I cover SQL Server roles and permissions that can act as viable avenues for privilege escalation to sysadmin.

VladDBA
Blog post from the past:
In which I go over potential reasons for why some special characters end up corrupted and displayed as question marks, squares or something completely different in SQL Server.
https://vladdba.com/2024/10/04/characters-question-marks-squares-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba
Characters displayed as question marks or squares in SQL Server

In this post I'm going over potential reasons why some characters end up displayed as question marks or squares in SQL Server.

VladDBA
New blog post:
My guideline on how to handle and test SQL Server backups to ensure their viability and avoid a "Schrödinger's backup" scenario.
https://vladdba.com/2026/04/23/test-sql-server-backups-schrodingers-backups/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #azure
Test SQL Server backups to avoid Schrödinger's backups

This post is my guideline on how to handle and test SQL Server backups to ensure their viability and avoid a "Schrödinger's backup" scenario.

VladDBA
Recently updated post:
In which I discuss the risks of improperly configured SQL Server linked server connections and provide recommendations for securing them.
Now with a query to identify improperly configured linked server connections.
https://vladdba.com/2023/07/10/securing-sql-server-linked-servers/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #security
Securing SQL Server linked servers

In this post I address improper security configurations and their impact, as well as recommendations for securing SQL Server linked servers.

VladDBA

New blog post:
I demo cracking SQL Server 2025 login passwords offline.
hashcat is currently the only viable tool for auditing SQL Server 2025 login passwords.

The results show how #PBKDF2 slows down brute-force attacks both inside and outside of SQL Server compared to the pre-2025 hashing algorithm.

Full methodology, benchmarks, and code included.
https://vladdba.com/2026/04/16/cracking-sql-server-2025-login-passwords-offline-with-hashcat/
#sqlserver #sqldba #microsoftsqlserver #hashcat #cybersecurity #infosec #sql

Cracking SQL Server 2025 login passwords offline with hashcat

In this blog post I demo cracking SQL Server 2025 login passwords offline with hashcat, including the current stable release (7.1.2).

VladDBA
New blog post:
In which I go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.
https://vladdba.com/2026/04/15/dynamic-t-sql-sql-injection-quotename-executesql/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
Using dynamic T-SQL? Parametrization alone can't prevent SQL injection

In this post I'll go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.

VladDBA
New blog post:
My second contribution to T-SQL Tuesday, about a session that got me interested into the security side of things.
https://vladdba.com/2026/04/14/t-sql-tuesday-197-impactful-session-dba-career/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday
T-SQL Tuesday #197 - An impactful session changed my DBA career

My second time participating in T-SQL Tuesday, Steve Hughes‘s invitation about an impactful session from a conference brought back memories.

VladDBA
New blog post:
In which I provide some examples as to why FLOAT isn’t the best option for storing exact financial data in SQL Server.
https://vladdba.com/2026/04/11/stop-using-float-for-financial-data-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
PSA: Stop using FLOAT to store financial data in SQL Server

In this post I provide some examples as to why FLOAT isn't the best option for storing exact financial data in SQL Server.

VladDBA