SQL injection is just the beginning. In production PostgreSQL environments, subtle misconfigurations and overlooked features open doors to far more sophisticated attacks. This talk goes beyond the basics to uncover real-world threats: privilege escalation via extensions and foreign data wrappers, timing and side-channel attacks that extract secrets through query latency, abuse of logical replication, and pitfalls in role inheritance and row-level security. Walk away with actionable defenses for each.

https://live.pgconf.in/pgconfin/pgconf-india-2026/schedule/152