SQL Data Discovery & Classification, a tool within Microsoft's SQL Server 2019, could inform attackers which data within a database is labeled sensitive, and which isn't, researchers report.