Blue Core Research

How to Secure Your Data Part 4: Activity Profiles

Guadalupe Boll — Tue, 29 Sep 2026 18:33:13 +0000

In the first three parts of this series, we established a strict data-centric methodology that builds security from the inside out. We started with the database where the data lives, and inside the database we focused on the critical sensitive data assets. However, once an attacker is already accessing your sensitive data, you have no […]

Source

How to Secure Your Data Part 3: Sensitive Data Control

Guadalupe Boll — Tue, 01 Sep 2026 14:09:42 +0000

This is Part 3 in our series on how to secure your data (read Part 2: Database Session Control). Defending sensitive data is the core of database security. This chapter ignores upstream attack vectors and focuses exclusively on securing the data itself. Data defense comes down to a single operational reality: every data breach must […]

Source

Discover Sensitive Data: Using AI Analysis of Runtime SQL Activity

Guadalupe Boll — Fri, 28 Aug 2026 18:28:47 +0000

Sensitive data discovery is essential to any security initiative, and this new application of AI technology quickly narrows the focus to your critical columns. By analyzing runtime SQL activity with AI, security teams can eliminate 95% of the noise and map active sensitive data in minutes. The Unspoken Roadblock Killing Database Security Data masking, compliance […]

Source

Architecting Security Against Real-World Attack Vectors

Guadalupe Boll — Wed, 12 Aug 2026 13:34:52 +0000

Perimeter defenses fail to deliver protection because adversaries leverage attack vectors that bypass them. For example, by using valid credentials, exploiting software vulnerabilities, or attacks by internal users already inside the perimeter. Every major attack path – from application-tier exploits to host-level compromises – ultimately targets enterprise data stores for exfiltration, alteration, or ransomware extortion. […]

Source

Automated Sensitive Data Discovery: Mapping Database Schemas

Guadalupe Boll — Wed, 29 Jul 2026 13:20:22 +0000

Every organization sits on a ticking data time bomb. This risk does not stem from a breakthrough in sophisticated hacking techniques. It exists because companies do not know what sensitive data they store or where it resides. As infrastructure scales and databases grow, organizations completely lose track of their assets. This challenge spans two independent […]

Source

How to Secure Your Data Part 2: Database Session Control

Guadalupe Boll — Mon, 27 Jul 2026 12:54:10 +0000

This is Part 2 in our series on how to secure your data. In Part 1, we established the theoretical foundation and the necessity of balancing and prioritizing detection over prevention. In this installment, we move into practical implementation, starting with database session control. Session control is generally easier, but you have to learn to […]

Source

DIY: Auditing Oracle for FREE

Guadalupe Boll — Tue, 21 Jul 2026 18:18:15 +0000

Auditing an Oracle database may not be a trivial exercise, but it’s not that difficult either. Oracle includes everything you need out of the box for free. You just need to know how to put the pieces together, and this guide will show you the roadmap, explaining everything you need to know. The Four Pillars […]

Source

Poll: Security Product Selection Criteria

Guadalupe Boll — Mon, 29 Jun 2026 14:08:25 +0000

A recent industry poll regarding security product procurement reveals a stark divergence in buyer psychology: 75% of respondents cite vendor reputation and market recognition as their primary deciding factor, while only 25% prioritize product quality. Price and purchasing friction received almost no votes. Deciding Factor Percentage of Respondents Core Buyer Motivation Vendor Reputation or Recognition […]

Source

How to Secure Your Data – Part 1

Guadalupe Boll — Thu, 25 Jun 2026 13:18:46 +0000

The cybersecurity industry is built on a collective of lies. Every year, enterprise security teams pour millions into next-generation firewalls, zero-trust network access, and edge protection vendors who promise to turn their infrastructure into an unbreachable fortress. Every year, there’s a new promise of the next revelation. And every year, those same enterprises end up […]

Source

Vendor Preference Poll: The Ideal Vendor

Guadalupe Boll — Tue, 02 Jun 2026 14:26:04 +0000

We recently polled a group of cybersecurity and IT leaders about their ideal type of vendor for high-end security solutions. The results were overwhelming: On paper, this makes perfect sense. Security leaders are smart and know that smaller, specialized vendors are agile, stay ahead of the technology curve, and offer deep, expert support. They also […]

Source