http://blogs.technet.com/srd/archive/2010/04/29/sharepoint-xss-issue.aspx

Here the workarounds

http://www.microsoft.com/technet/security/advisory/983438.mspx

http://blogs.msdn.com/g/archive/2009/01/22/column-level-security-in-sharepoint.aspx

http://vinaybhatia.blogspot.com/2009/09/column-level-permissions-in-moss-2007.html

http://officetoolbox.codeplex.com/

http://blog.sharepointsalvation.com/archive/2009/07/30/sharepoint-security-bugs-and-annoyances.aspx

http://raiumair.wordpress.com/2009/08/17/security-trim-contents-of-a-data-view-web-part/

http://blog.solanite.com/keith/Lists/Posts/Post.aspx?ID=9

http://www.sharepointsecurity.com/sharepoint/sharepoint-security/item-level-security-model-ils-securable-objects-so-and-content-structure-sharepoint-site-definitions-lists-features-and-solutions/

(via http://www.sharepointcomic.com/Lists/Posts/ViewPost.aspx?ID=172)

Files and permissions
http://technet.microsoft.com/en-us/library/cc721631.aspx

Database permissions
http://technet.microsoft.com/en-us/library/cc974463.aspx

Special directories and storage locations
http://technet.microsoft.com/en-us/library/cc721634.aspx

Account Permissions and Security Settings
http://technet.microsoft.com/en-us/library/cc678863.aspx

Nice post about the SPSecurityTrimmedControl

http://raiumair.wordpress.com/2009/08/05/security-trim-control/

http://blogs.msdn.com/miah/archive/2008/03/31/encrypting-information-in-sharepoint-lists.aspx
http://www.codeplex.com/CryptoCollaboration

http://store.bamboosolutions.com/kb/article.aspx?id=10829

http://johnholliday.net/post/2008/09/06/SharePoint-Permission-Dependency-Chart.aspx

http://blog.thekid.me.uk/archive/2008/11/20/lockdown-wss-system-pages-on-public-sharepoint-sites.aspx

about RoleDefinitions, RoleAssignments,Inheritance

http://kjellsj.blogspot.com/2008/10/sharepoint-acls-roledefinitions.html

Custom audit Sharepoint

http://msdn2.microsoft.com/en-us/library/bb397403.aspx

http://blogs.msdn.com/edhild/archive/2008/01/16/how-to-add-security-trimming-info-to-custom-actions-in-sharepoint.aspx

Governance for Sharepoint is VERY big at the moment : articles, upcoming conference, and real world customer needs

http://www.cmswire.com/cms/enterprise-cms/one-collaboration-platform-to-rule-them-all-002127.php
http://blogs.msdn.com/joelo/archive/2006/08/23/key-governance-considerations-in-a-sharepoint-deployment.aspx
http://blogs.officezealot.com/mauro/archive/2007/03/04/20180.aspx
http://sharepoint.microsoft.com/blogs/mikeg/Lists/Posts/Post.aspx?ID=357
http://blogs.technet.com/kailash/archive/2007/06/14/sharepoint-governance.aspx

SharePoint Governance and Manageability - Home

Some bird told me Governance is going to be VERY BIG in Sharepoint Version Next.

Sharepoint should have a better demarkation between "internal" users (as given by Windows and Active Directory which are essentially company employees) and "external" users like contacts.

http://blogs.msdn.com/robgruen/archive/2007/11/15/how-to-programmatically-set-permissions-on-files-folders-in-a-sharepoint-document-library.aspx

ADAM (Active Directory Application Mode) used as a Role provider in Sharepoint

http://blogs.msdn.com/scaravajal/archive/2007/10/23/sharepoint-2007-and-adam.aspx

 (via http://blogs.msdn.com/mskumar/archive/2007/10/24/active-directory-membership-provider-and-sharepoint.aspx)

http://www.sharepointsecurity.com/content-183.html

Things to come ...

http://www.pcworld.idg.com.au/index.php/id;1069202916;pp;1

http://support.microsoft.com/?id=923643

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9035138

Should be a minor security update. Read full details on

http://www.microsoft.com/technet/security/bulletin/ms07-sep.mspx

In one of a clients requirements for a Records Management system I needed to only allow certain users to see certain Content Types.

Now, it can be done with EventHandlers in Sharepoint, but wouldn't it be nice to assign user permissions to each Content Type ...

e.g only a project manager can see documents of type "project budget"

How to configure Code Access Security for a Web Part

Very clever authentication mechanism

http://www.willierust.com/Lists/Posts/Post.aspx?ID=5

http://blogs.msdn.com/sharepoint/archive/2007/05/10/how-to-lockdown-an-internet-facing-moss-based-web-site.aspx

Make BDC work with FBA

http://blogs.msdn.com/markarend/archive/2007/04/26/configuring-users-across-site-collections.aspx

Sharepoint Autentication & Authorization providers (code in C# and FREE!!)

http://www.sharepointsecurity.com/content-99.html