Security issues when using aliased users in SQL Server

This tip shows you how to find security holes when aliased users are setup in your databases and also that this feature will be deprecated in SQL Server 2008.

SQL Server security settings using the Surface Area Configuration tool (SAC)

Are any tools available to secure SQL Server independent of the logins and users that I have in place? Do I need to manage SQL Server on each machine or can I do so from a single application?

Security

SQL Server security: Database roles

Database roles for SQL servers can increase the security of your enterprise. Understand how to set up database roles, and learn how they function.

Certificates

Security

SQL Server Vulnerabilities

A remote code execution vulnerability affects 200 and 2005.

Using the Service Audit Object in SQL Server 2008

Brian Kelley looks at auditing in this article about SQL Server 2008 and the enhancements made in this version. The new Audit Object allows you to more easily determine what is happening on your SQL Server instance.

How do I assign permissions to users to see SQL Agent Jobs?

You can give your users rights to check if reports have run or jobs are complete without granting full admin rights. Here's how you can do so by using SQLAgentReaderRole in SQL Server

MSIE 0-day Spreading Via SQL Injection

Announcement of MSIE issue.