Today is Launch Day for 3 big products from Microsoft - Windows Server 2008, Visual Studio 2008 and SQL Server 2008. Click on the image to learn more general information and participate in the virtual launch. 
I want to briefly salute some of the security improvement represented by these products. This is not a comprehensive list, and I will certainly dig into some of these in more detail later, but it should give you a good idea:
- Windows Server 2008
- Building on the solid WS2003 security record, which was a huge step forward from Windows 2000. As a tribute to 2003, please check out http://www.loneserver.com, a fun site about the last WS2003 in use in the MSCOM server network.
- Architectural and defense-in-depth protections similar to those lauded in Windows Vista, such as ASLR, Services hardening, and general benefit of the latest generation of the SDL.
- Server Core
- Network Access Protection. Policy driven health checks of machines before they are granted full network access.
- SQL Server 2008
- Built upon the incredible security record of SQL Server 2005, which has had zero vulnerabilities in the database code since it launched over 2 years ago.
- Transparent encryption and improved security policy management capability
- Visual Studio 2008
- Latest generation of security source code scanning tools
- New T-SQL Static code analysis
- Linq (nothing to do with security, but it rocks!)
Regards,
Jeff
