Pete Finnigan's Oracle security weblog

New PFCLScan Version 2025 Released to all Customers

Mon, 02 Feb 2026 14:43:48 +0000

We have just released a new version of PFCLScan at the end of last week. This is version 2025. PFCLScan is our database security tool for the Oracle database. There are a lot of changes and fixes to this version....[Read More]

Posted by Pete On 02/02/26 At 02:43 PM

Detecting Password Guessing in Oracle using LCOUNT

Mon, 02 Feb 2026 14:43:48 +0000

I want to briefly discuss how we might detect that an attacker is trying to guess passwords and trying to connect to an Oracle database. One simple way that I have been aware of for many years, decades even is....[Read More]

Posted by Pete On 15/01/26 At 03:08 PM

Happy New Year 2026, Oracle Security Training, MySQL, Anniversary

Mon, 02 Feb 2026 14:43:48 +0000

I want to wish a very happy New year for 2026 to all of our customers, web site visitors and all of our social media connections and likers and commenters. Thanks for all of your support over the years!! We....[Read More]

Posted by Pete On 13/01/26 At 12:02 PM

Do Not Put Security Checks in an Oracle BEGIN END block

Mon, 02 Feb 2026 14:43:48 +0000

PL/SQL packages can have a single BEGIN/EXCEPTION/END block as part of the package such as: create or replace package body block as procedure test is begin dbms_output.put_line('Hello from test()'); end; begin dbms_output.put_line('Hello from begin; end'); exception when others then dbms_output.put_line('BEGIN:['||sqlerrm||']')....[Read More]

Posted by Pete On 24/11/25 At 02:56 PM

Join the Oracle Security Masterclass this December in York!

Mon, 02 Feb 2026 14:43:48 +0000

Are your organisation’s Oracle databases fully secured or are you leaving the door ajar to unwanted access, data leaks or worse? If you’re responsible for managing, designing or auditing Oracle databases, then the upcoming three-day course by Pete Finnigan is....[Read More]

Posted by Pete On 11/11/25 At 10:01 AM

AI for Oracle Security

Mon, 02 Feb 2026 14:43:48 +0000

I spoke about AI and Oracle security back in February in this blog - AI and Oracle Security . I asked the question can we use AI (LLM / Generative AI) in Oracle Security and if so how? The two....[Read More]

Posted by Pete On 15/10/25 At 12:42 PM

Can we Detect Disable Trigger in the Oracle Database

Mon, 02 Feb 2026 14:43:48 +0000

If i want to create layered security in a database around something such as specific data or to protect access to a resource or perhaps control access to a privilege then we can create a security layer using standard features....[Read More]

Posted by Pete On 24/09/25 At 08:37 AM

Fuzzing PL/SQL and Secure Design Patterns for PL/SQL and Oracle

Mon, 02 Feb 2026 14:43:48 +0000

I have just been notified that I have had two sessions accepted for the UKOUG conference from 30th November to 2nd December 2025 at the East Side Rooms in Birmingham. My first session is called Fuzzing PL/SQL and is overviewed....[Read More]

Posted by Pete On 22/09/25 At 04:41 PM