I am including a link to Laurentiu Cristofor's blog: http://blogs.msdn.com/lcris. Laurentiu is one of the most valuable contributors in the SQL Security forums, and his articles and demos are great resources for anyone interested in SQL Server security

 

I would also like to add a link for a blog that unfortunately has been discontinued, but has interesting articles: http://blogs.msdn.com/yukondoit/.