Another very interesting TechEd Session presented by Paula Januszkiewicz on security. Recorded on 29 October
Want to know how easy it can be for hackers to get control of your webserver and other servers? The you should what this demo from TechEd 2014.
Of course some of the things should never be happening. Like connecting to a SQL server from a web application with the SA account.