This comprehensive FAQ-type document discusses many of the major security concerns, patches and updates for SQL Server (largely focusing on SQL 7). A must read for any production shop.
SQL Server, Azure SQL Database, Amazon RDS & AWS, Oracle and IBM Help