data encryption Archives

Tech Optimizer

July 7, 2025

Percona offers clear view into Transparent Data Encryption

Percona has launched its Transparent Data Encryption (TDE) extension for PostgreSQL, designed to secure sensitive data at rest without licensing fees or usage restrictions. TDE automatically encrypts and decrypts data at the database layer, protecting backups and transaction logs, with encryption keys stored separately. The pg_tde extension supports compliance with regulations like GDPR, HIPAA, SOX, and PCI DSS v4.0, and allows users to encrypt all database files, apply encryption at the table level, and maintain control over their encryption strategies. It integrates with Key Management Services (KMS) providers and requires a patched PostgreSQL server to function. Percona aims to extend pg_tde to Community PostgreSQL, with some code already contributed for review. The extension is included in the Percona Distribution for PostgreSQL, which also offers support and consulting services for TDE setup and configuration.

Tech Optimizer

July 4, 2025

Percona launches free open source encryption for PostgreSQL data

Percona has introduced Transparent Data Encryption (TDE) for PostgreSQL as a fully open-source and production-ready solution, enabling organizations to encrypt data at rest and comply with regulations like PCI DSS v4.0 without incurring licensing fees. The TDE extension, named pg_tde, is now part of the Percona Distribution for PostgreSQL and addresses barriers to adopting enterprise-level data encryption in open-source environments. Key features include encryption of all database files on disk, granular encryption policies, seamless integration into existing systems, and streamlined key management with major Key Management Services. The solution supports online key rotation and has minimal performance impact. Percona also provides 24/7 assistance for setup and management, making the solution accessible to organizations of all sizes.

Tech Optimizer

July 2, 2025

Coming to PostgreSQL

Transparent Data Encryption (TDE) is a method for securing data at the storage layer, which PostgreSQL lacks in its open-source version. Percona has developed a TDE extension called pg_tde, included in the Percona Distribution for PostgreSQL, and aims to integrate it into the main PostgreSQL distribution. The extension is beneficial for organizations needing to comply with regulations like GDPR. EDB also offers a TDE solution, but only within its licensed products. Percona's TDE provides enterprise-grade data-at-rest protection without licensing fees. The extension encrypts all database files on disk and features centralized Key Management, compatible with various Key Management Services (KMS) providers.

Tech Optimizer

July 2, 2025

CompTIA State of the Tech Workforce 2025 released, Meta joins Kotlin Foundation, Percona launches Transparent Data Encryption for PostgreSQL

CompTIA's State of the Tech Workforce 2025 report shows a 1.2% growth in the tech workforce in 2024, totaling 5.9 million professionals, with projections of reaching 6.1 million by 2025. California, Texas, New York, Florida, and Virginia are the leading states in tech employment, while Texas, North Carolina, Florida, New Jersey, and Tennessee have seen the most growth. Major cities with advancements in tech job opportunities include New York City, Orlando, Sacramento, Salt Lake City, and Baltimore. Meta has joined the Kotlin Foundation to promote Kotlin within its development ecosystem and will contribute to a grants program for open-source library authors. Percona has launched an open-source Transparent Data Encryption extension for PostgreSQL, allowing organizations to secure data at rest without licensing fees or vendor lock-in. The extension supports deployment without application changes, multi-tenant environments, control over encryption strategies, and centralized key management.

Tech Optimizer

July 1, 2025

Percona Launches First-Ever Open Source Transparent Data Encryption for PostgreSQL

Percona has launched its Transparent Data Encryption (TDE) extension for Percona for PostgreSQL, enabling organizations to secure sensitive data at rest and comply with regulations without incurring licensing fees or vendor lock-in. The TDE extension provides automatic and transparent encryption of data, supports compliance with regulations like GDPR, HIPAA, SOX, and PCI DSS v4.0, and offers features such as open-source availability, stronger data protection, granular user-controlled encryption, seamless integration, centralized key management, minimal performance impact, and trusted support services. The pg_tde extension is now part of the Percona Distribution for PostgreSQL, enhancing security for customers needing encryption compliance.

Tech Optimizer

July 1, 2025

Industry Exchange Data 2025: EDB’s Jeremy Wilson on how to secure your data (Psst: Secure your database)

All software is susceptible to security vulnerabilities, but open-source solutions can enhance defenses against cyber threats, according to Jeremy Wilson, CTO for the North America public sector at EDB. He noted that the global community continuously inspects open-source code, leading to fewer issues and quicker resolutions. EDB's PostgreSQL database product is designed for online transaction systems, data warehousing, and analytics, incorporating security enhancements and performance improvements. EDB synchronizes its release cycles with the open-source community and aims to meet regulatory requirements, including obtaining FedRAMP High certification. EDB collaborates with Red Hat to implement security controls and has integrated features like transparent data encryption and APIs to support zero trust cybersecurity initiatives. Wilson acknowledged challenges agencies face when transitioning to open-source solutions, including legacy systems and regulatory compliance hurdles. EDB aims to provide a turnkey enterprise database that simplifies the migration of applications, ensuring compliance with FIPS 140-3 and DISA STIGs.

Tech Optimizer

June 17, 2025

EnterpriseDB targets AI development with latest update

EnterpriseDB has introduced new features for its EDB Postgres AI platform, including a low-code/no-code environment for application development and enhanced data observability across various databases. The platform, launched in May 2024, integrates relational and non-relational data, automates data pipelines, and supports multiple workloads. The new capabilities aim to improve the success rate of AI projects, which face an estimated 80% failure rate in transitioning from development to production. The updates include tools for managing PostgreSQL databases in hybrid cloud and on-premises environments, Transparent Data Encryption for security, and an analytics engine optimized for AI workloads. EnterpriseDB's enhancements were influenced by customer feedback, focusing on maximizing the value of existing data and supporting GenAI workflows. The company plans to expand its AI ecosystem and enhance its competitive position within the PostgreSQL community.

Tech Optimizer

June 17, 2025

EDB Postgres AI Accelerates New Era of Sovereign Data and AI for Enterprises, Industries, and Nations

EnterpriseDB has introduced significant advancements to its EDB Postgres AI (EDB PG AI) platform, enabling secure and compliant deployment of AI solutions across Postgres environments. The platform integrates transactional, analytical, and AI workloads into a unified system, featuring automatic pipelines and built-in development tools for data automation. Key capabilities include low-code/no-code simplicity for rapid AI pipeline creation and comprehensive hybrid management for real-time insights across databases. Recent research indicates that only 13% of enterprises have successfully implemented agentic AI applications at scale, with early adopters achieving up to 227% higher ROI. Collaborations with Red Hat aim to provide organizations with solutions for successful AI outcomes. New features include enhanced data security, a purpose-built PG AI Analytics Engine for high-performance queries, and a universal data store for various data models. Performance advantages include six times better total cost of ownership (TCO) compared to SQL Server and up to 150 times faster NoSQL performance than MongoDB. A comparative analysis showed that EDB PG AI reduced overall complexity by 67% and maintenance costs by 38%.

Tech Optimizer

June 7, 2025

CISA Warns of Rising Play Ransomware Threat to Infrastructure

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a critical advisory on December 18, 2023, regarding the rising threat of Play Ransomware, which targets various organizations, particularly critical infrastructure and public sector entities. The advisory details the tactics used by Play Ransomware actors, including exploiting unpatched systems and phishing campaigns, leading to severe consequences like data encryption and high ransom demands. The ransomware can disable antivirus software and exfiltrate sensitive data before encryption. Play Ransomware employs double extortion tactics, threatening to leak stolen data if ransoms are not paid. CISA recommends organizations prioritize patch management, implement multi-factor authentication, train employees to recognize phishing attempts, and maintain regular offline data backups. The advisory calls for collaboration between public and private sectors to combat this threat and emphasizes the importance of information sharing to stay ahead of ransomware tactics.

AppWizard

May 20, 2025

Preventing App-Based Threats on Android Devices

By 2025, the Android platform faces increasingly sophisticated app-based threats, including ransomware, fake apps, social engineering, and remote access attacks. Cybercriminals exploit Android's open architecture, prompting the need for advanced security measures. Android's security architecture includes: 1. Google Play Protect: Scans applications before installation using real-time machine learning to detect emerging malware and deceptive tactics. 2. Application Sandboxing: Isolates apps to prevent data access between them, utilizing Linux permissions and SELinux policies. 3. App Signing and Code Integrity: Requires cryptographic signatures for apps, complicating the introduction of rogue certificates and runtime modifications. Advanced protections include Runtime Application Self-Protection (RASP) for high-security apps, which monitors behavior in real time, and secure coding practices that encourage regular code reviews, strong authentication, and data encryption. User vigilance is crucial, emphasizing responsible downloading, limiting permissions, keeping software updated, enabling two-factor authentication, and being cautious with public Wi-Fi. Google continuously updates security measures, ensuring older devices receive new protections, while collaboration with the security community aids in identifying and countering emerging threats.