Two security update packages for SQL Server 2005 Service Pack 2, KB948108 and KB948109, fix an issue that could let an attacker take control of your system.
SQL SERVER – Difference Between Database Mail and SQLMail
What is the difference between Database Mail and SQLMail? I explain why Database Mail, based on SMTP, replaced the older MAPI based SQLMail.
SQLAuthority News – Rise in SQL Injection Attacks Exploiting Unverified User Data Input
Microsoft warns of a rise in SQL Injection attacks on ASP and ASP.NET sites that skip secure coding. Verifying user data input is the key defense.
SQL SERVER – 2008 – High Availability – Hot Add CPU
Hot Add CPU in SQL Server 2008 is a cool high availability feature, but it needs supporting hardware and 64-bit Windows Server 2008 Enterprise or Datacenter.
SQLAuthority News – Microsoft Source Code Analyzer for SQL Injection
Microsoft Source Code Analyzer for SQL Injection scans ASP code for SQL Injection vulnerabilities. Here are the steps to download and install it.
SQLAuthority News – White Paper: Security Overview for Database Administrators
Security Overview for Database Administrators is a Microsoft white paper on SQL Server 2008 security: secure setup, permissions, encryption and auditing.
SQLAuthority Download – Providing Security for Web Applications and Infrastructure: Best Practices for Managing Security Risks
A Microsoft deck on security for web applications and infrastructure from the Windows Live team, plus simple database checks you can use today.