📊 HiddenMerit Daily · Issue 10 Focus on Database Frontiers, Practical Insights for DBAs May 5, 2026 ｜ 5 Selected Global Breaking News 01｜OceanBase Fully Discloses Global Business for First Time: Covering Over 1.3 Billion Users, Overseas Revenue Up 200% On May 3, at the Infinity2026 conference held in Kuala Lumpur, Malaysia, OceanBase for the first time fully disclosed its global business progress, and simultaneously announced the launch of its Global Support Center in Kuala Lumpur, promising 7×24 hour response – another core hub following its Singapore international headquarters. Public data shows that in the fintech sector, OceanBase has served over 100 enterprises, covering more than 20 e-wallets and over 50 payment platforms, with its customers collectively covering more than 1.3 billion end users. In traditional finance sectors such as banking, it has served over 400 financial institutions, including banks, insurance companies, and wealth management firms, with more than 60% deploying OceanBase in their core business systems. Customers include cross‑border institutions like HSBC and Hang Seng Bank. Among its benchmark clients, the Philippines’ top national super app GCash reduced storage space by 70% and resource costs by 40% after migration, while Malaysia’s TNG eWallet, which has over 26 million verified […]

📊 HiddenMerit Daily · Issue 9 Focus on Database Frontiers, Practical Insights for DBAs May 4, 2026 ｜ 5 Selected Global Breaking News — 01｜Southeast Asian Military Government Network Suffers Chain Attack: cPanel Zero-Day + PostgreSQL Command Injection as Key Breach Points A recent cyberattack targeting government and military infrastructure in Southeast Asia has been exposed, leveraging CVE-2026-41940 and other vulnerabilities in combination. Attackers first used a critical authentication bypass vulnerability in cPanel and WHM (CVSS 9.8, affecting all versions after v11.40) to gain administrator privileges by bypassing login authentication. Targeting a training portal of an Indonesian defense agency, attackers exploited valid credentials already in hand and a zero-day vulnerability to bypass the CAPTCHA mechanism by directly reading the expected verification code value from session cookies issued by the server. During the core data exfiltration phase, attackers injected SQL through a file-saving endpoint via the document-name field, then used PostgreSQL’s COPY … TO PROGRAM functionality to elevate privileges from the database layer directly to the operating system, executing arbitrary shell commands, capturing the output, and re-ingesting it into application records via pg_read_file() – achieving silent data infiltration. Approximately 110 files (about 4.37 GB) were stolen, including sensitive materials such as […]

HiddenMerit Daily · Issue 8 May 3, 2026 Introduction: This issue focuses on the latest developments in the database sector, with emphasis on SQL Server, MySQL, PostgreSQL, Oracle, and domestic Chinese databases in areas such as security, AI integration, compatibility, and localized innovation (信创). Over the past two days (May 1–2, 2026), the industry has centered on security patch rollouts, PostgreSQL maintenance updates, and discussions around domestic database advancements—reflecting the ongoing evolution of data infrastructure under the AI-driven wave and a strong emphasis on security. Below are 10 selected key updates, each commented on from DBA (operational execution), CTO (strategic decision-making), and Investor (market potential) perspectives. 1. Microsoft SQL Server 2025 April 2026 Security Updates (CU3/GDR) Continue to Roll Out Recent SQL Server 2025 security patches addressing RCE and privilege escalation vulnerabilities are being rapidly deployed in enterprise environments.  DBA Perspective: Immediately validate CU/GDR in staging environments and use rolling upgrades to minimize business impact. Update monitoring alerts post-deployment. CTO Perspective: Strengthen security baselines in the Microsoft stack and accelerate migration of core systems to cloud-managed services while evaluating tighter integration with AI toolchains. Investor Perspective: Microsoft’s moat in enterprise AI + data security is further solidified, supporting long-term […]

📊 HiddenMerit Daily · Issue 7 Focus on Database Frontiers, Practical Insights for DBAs May 3, 2026 ｜ 5 Selected Global Hot Topics 01｜Oracle Releases April Critical Patch Update, Fixes 241 CVE Vulnerabilities On April 21, 2026, Oracle released its second quarterly Critical Patch Update (CPU) of the year, fixing a total of 481 security patches across 28 product families, involving 241 CVE vulnerabilities. In this update, Oracle Communications products were hit hardest (139 vulnerabilities), followed by Financial Services products (75). Key MySQL Server Vulnerabilities: CVE ID Affected Component CVSS Score Description CVE-2026-35239 DML — DML resource release defect CVE-2026-35240 Optimizer — High-privilege attacker can cause server crash/hang CVE-2026-22004 InnoDB — Problem-level vulnerability CVE-2026-22005 Optimizer — Optimizer defect can lead to denial of service — Optimizer (another) — Low-privilege attacker can exploit multi-protocol access Affected MySQL versions include 8.0.45 and earlier, 8.4.8 and earlier, and 9.6.0 and earlier. With MySQL 8.0 officially EOL, these security update risks deserve especially high vigilance. DBA Perspective MySQL 8.0 officially reached EOL on April 30, but this CPU still includes many security vulnerability fixes for the 8.0 branch. Although Oracle no longer provides routine security patches for the Community Edition after EOL, paid extended […]

Here is the corrected **fully English** version of **”HiddenMerit Daily · Issue 6″** with the remaining Chinese phrases properly translated and a full review ensuring no other Chinese characters remain. — # 📊 HiddenMerit Daily · Issue 6 > **Focus on Database Frontiers, Practical Insights for DBAs** > May 2, 2026 ｜ 5 Selected Global Hot Topics ## 01｜IBM Db2 12.1.5 Officially Announced: Vector Index + Native AI Model Integration, Aiming for Enterprise-Grade AI Data Platform On May 1, IBM officially announced that Db2 12.1.5 will be generally available on June 9, 2026. This release builds on the AI foundation of Db2 12.1, introducing several major capabilities with the goal of making Db2 a unified platform for enterprise-grade AI data. **Core Technical Highlights**: | Capability Area | Key Updates | Value Interpretation | |—————–|————-|———————-| | **Vector Search** | DiskANN-powered vector index, supporting semantic search, recommendation engines, RAG | No separate vector database needed | | **AI Model Integration** | Native integration with watsonx.ai and OpenAI-compatible models, SQL function direct invocation | Data vectorization without leaving the database | | **High Availability** | Support for >3 standby databases, cascading HADR, Pacemaker arbitration disk | Five-nines availability for cloud and hybrid environments […]

Here is the corrected **fully English** version of **”HiddenMerit Daily · Issue 5″** with all remaining Chinese phrases properly translated. — # 📊 HiddenMerit Daily · Issue 5 > **Focus on Database Frontiers, Practical Insights for DBAs** > May 1, 2026 ｜ 5 Selected Global Hot Topics — ## 01｜Domestic Database Industry Enters Knockout Round: AI Rewrites the Rules, Ecosystem Determines Survival On April 22, the 2026 China Database Technology and Industry Conference was held in Beijing. Beyond Dameng’s release of four new products, the market report released by CCID Consulting revealed deeper industry trends: China’s database industry is moving from “large-scale replacement” into a new phase of “high-quality development and market shakeout.” **Core Data**: | Metric | Value | Interpretation | |——–|——-|—————-| | 2025 Market Size | 43.02 billion yuan | Domestic vendors already lead foreign vendors in market share | | Leading Domestic Brand Sales | Steady and sustained growth | Market concentration rapidly increasing | | New Industry Entrants | Continuously decreasing | Era of extensive expansion is over | **Three Driving Forces Behind the Knockout Round**: 1. **Deep AI Penetration**: Databases need to simultaneously handle both data elementization and intelligent application demands. The ability to natively […]

Here’s the explanation about PostgreSQL functions and rollback behavior with primary key conflicts: ## Default Behavior Demonstration “`sql — Create test table CREATE TABLE test_table ( id INT PRIMARY KEY, name VARCHAR(50) ); — Create function: intentionally cause a primary key conflict on the second insert CREATE OR REPLACE FUNCTION test_insert_with_conflict() RETURNS VOID AS $$ BEGIN — First insert (should succeed) INSERT INTO test_table (id, name) VALUES (1, ‘First’); — Second insert (attempts to insert existing id=1, will cause conflict) INSERT INTO test_table (id, name) VALUES (1, ‘Second’); — Third insert (will not be reached) INSERT INTO test_table (id, name) VALUES (2, ‘Third’); END; $$ LANGUAGE plpgsql; — Execute function (will error) SELECT test_insert_with_conflict(); — Query result: no data was inserted SELECT * FROM test_table; — Result is empty, all inserts were rolled back “` ## Using Subtransactions (SAVEPOINT) for Partial Rollback If you want to catch the conflict and allow other inserts to succeed, you can use subtransactions: “`sql — Create function: isolate conflicting insert using subtransaction CREATE OR REPLACE FUNCTION test_insert_with_savepoint() RETURNS VOID AS $$ BEGIN — First insert INSERT INTO test_table (id, name) VALUES (1, ‘First’); — Use subtransaction to handle potential conflict BEGIN INSERT INTO test_table […]

📊 HiddenMerit Daily · Issue 4 Focus on Database Frontiers, Practical Insights for DBAs April 30, 2026 ｜ 5 Selected Global Hot Topics 01｜Dameng DM9 Debuts at Digital China Summit: Domestic Databases Move from “Running Alongside” to “Leading” The 9th Digital China Construction Summit was held grandly in Fuzhou from April 29 to 30. Dameng Data showcased its newly released DM9 database and full-stack product matrix at the on-site experience zone. Just before the summit, Dameng officially released its next-generation core product — Dameng Database Management System DM9 — at the 2026 China Database Technology and Industry Conference. Five Core Breakthroughs: Breakthrough Area Core Capability Real-World Data Core Transaction Shared storage cluster upgrade, built on 9-node domestic servers Tested TPC-C exceeding 10,000 TPS, response time only 223ms Architecture Fusion Centralized & distributed integration, seamless scaling 1000+ node distributed cluster, recovery within 1 minute Hybrid Workload Single system supporting both transactions and analytics Construction and O&M costs reduced by half Cloud Service Lightweight multi-tenancy, online transparent migration Sensitive data fully encrypted throughout the process AI Integration Native vector search, intelligent O&M assistant Ready to use for large model applications out of the box Market Position: According to the April domestic database […]

📊 HiddenMerit Daily · Issue 3 Focus on Database Frontiers, Practical Insights for DBAs April 29, 2026 ｜ 5 Selected Global Hot Topics 01｜Oracle Ushers in a “New Era” for MySQL: Vector Functions Coming to Community Edition, Independent Foundation on the Table Facing developer dissatisfaction with MySQL’s stagnant development, Oracle has finally made significant adjustments, promising to usher in a “new era” for MySQL. Core Community Grievances: Code commits have dropped sharply over the past year, with even months of no new code Lack of development transparency, roadmap and decisions lack community participation New features prioritized for Enterprise Edition and HeatWave, Community Edition “left in the cold” New developers gravitate towards PostgreSQL, MySQL developer demographic is aging Oracle’s “Three-Pronged” Commitment: Feature Downward Migration: Bring vector functions and other previously Enterprise-only features to the Community Edition Ecosystem Expansion: Provide more MySQL tools, frameworks, and connectors Transparent Governance: Publish development roadmap, encourage community contributions (work logs + bug reports) Foundation Progress: Approximately 100 signatures have been collected in support of establishing an independent MySQL Foundation, with the goal of allowing the community to guide MySQL’s development direction. DBA Perspective This is major news worth the attention of all MySQL users. Over the past […]

📊 HiddenMerit Daily · Issue 2 Focus on Database Frontiers, Practical Insights for DBAs April 28, 2026 ｜ 5 Selected Global Hot Topics 01｜Dameng Releases Four New Products: Domestic Databases Make Waves Again On April 22, the 2026 China Database Technology and Industry Conference, themed “Dameng Builds Foundation, AI Opens a New Era,” was held in Beijing. Dameng Data centrally released four strategic new products: DM9 Intelligent Database, DAMENG PAI V2.0 All-in-One Machine, Dameng Qiyun Database V4.0, and GDMBASE V4.0 Graph Database, covering centralized, distributed, cloud-native, all-in-one, and graph database scenarios. Core Highlights: Product Core Capabilities Key Metrics DM9 Centralized & distributed integration, supports vector/multi-model data, database agents 450+ new features DAMENG PAI V2.0 Ultra-fast storage + compute offload + full-stack RDMA I/O latency reduced from 400μs to 80μs, 12M+ IOPS Qiyun V4.0 AI-powered intelligent O&M, multi-cluster hybrid disaster recovery Solves “low O&M efficiency, complex disaster recovery, fragmented compute power” GDMBASE V4.0 Graph-native + vector integration, AI long-term memory Sub-500ms retrieval for billion-level nodes/edges Market Data: According to CCID Consulting, China’s database market reached 43.02 billion yuan in 2025, with domestic vendors already leading foreign vendors in market share. Dameng firmly ranks first among domestic vendors. DBA Perspective This is […]