http://blogs.technet.com/srd/archive/2010/04/29/sharepoint-xss-issue.aspx

Here the workarounds

http://www.microsoft.com/technet/security/advisory/983438.mspx

http://blogs.msdn.com/g/archive/2009/01/22/column-level-security-in-sharepoint.aspx

http://vinaybhatia.blogspot.com/2009/09/column-level-permissions-in-moss-2007.html

http://officetoolbox.codeplex.com/

http://blog.sharepointsalvation.com/archive/2009/07/30/sharepoint-security-bugs-and-annoyances.aspx

http://raiumair.wordpress.com/2009/08/17/security-trim-contents-of-a-data-view-web-part/

http://blog.solanite.com/keith/Lists/Posts/Post.aspx?ID=9

http://www.sharepointsecurity.com/sharepoint/sharepoint-security/item-level-security-model-ils-securable-objects-so-and-content-structure-sharepoint-site-definitions-lists-features-and-solutions/

Nice post about the SPSecurityTrimmedControl

http://raiumair.wordpress.com/2009/08/05/security-trim-control/

http://blogs.msdn.com/miah/archive/2008/03/31/encrypting-information-in-sharepoint-lists.aspx
http://www.codeplex.com/CryptoCollaboration

http://store.bamboosolutions.com/kb/article.aspx?id=10829

http://johnholliday.net/post/2008/09/06/SharePoint-Permission-Dependency-Chart.aspx

http://blog.thekid.me.uk/archive/2008/11/20/lockdown-wss-system-pages-on-public-sharepoint-sites.aspx

Custom audit Sharepoint

http://msdn2.microsoft.com/en-us/library/bb397403.aspx

http://blogs.msdn.com/edhild/archive/2008/01/16/how-to-add-security-trimming-info-to-custom-actions-in-sharepoint.aspx

Sharepoint should have a better demarkation between "internal" users (as given by Windows and Active Directory which are essentially company employees) and "external" users like contacts.

http://blogs.msdn.com/robgruen/archive/2007/11/15/how-to-programmatically-set-permissions-on-files-folders-in-a-sharepoint-document-library.aspx

ADAM (Active Directory Application Mode) used as a Role provider in Sharepoint

http://blogs.msdn.com/scaravajal/archive/2007/10/23/sharepoint-2007-and-adam.aspx

 (via http://blogs.msdn.com/mskumar/archive/2007/10/24/active-directory-membership-provider-and-sharepoint.aspx)

http://www.sharepointsecurity.com/content-183.html

Things to come ...

http://www.pcworld.idg.com.au/index.php/id;1069202916;pp;1

http://support.microsoft.com/?id=923643

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9035138

Should be a minor security update. Read full details on

http://www.microsoft.com/technet/security/bulletin/ms07-sep.mspx

In one of a clients requirements for a Records Management system I needed to only allow certain users to see certain Content Types.

Now, it can be done with EventHandlers in Sharepoint, but wouldn't it be nice to assign user permissions to each Content Type ...

e.g only a project manager can see documents of type "project budget"

How to configure Code Access Security for a Web Part

Very clever authentication mechanism

http://www.willierust.com/Lists/Posts/Post.aspx?ID=5

http://blogs.msdn.com/sharepoint/archive/2007/05/10/how-to-lockdown-an-internet-facing-moss-based-web-site.aspx

Make BDC work with FBA

http://blogs.msdn.com/markarend/archive/2007/04/26/configuring-users-across-site-collections.aspx

http://devcow.com/blogs/jdattis/archive/2007/02/23/Office_SharePoint_Server_2007_Forms_Based_Authentication_FBA_Walkthrough_Part_1.aspx

http://blogs.msdn.com/joelo/archive/2007/02/03/25-tips-to-lockdown-your-sharepoint-environment.aspx

http://mindsharpblogs.com/bill/archive/2006/12/11/1408.aspx

Exactly what I was hoping for ..... Sharepoint administration with Monad - Powershell command line

http://www.codeplex.com/PSSharePoint

Sharepoint Autentication & Authorization providers (code in C# and FREE!!)

http://www.sharepointsecurity.com/content-99.html