For all of you that are building web applications: "The OWASP Guide to Building Secure Web Applications and Web Services" is at http://www.owasp.org/
A 1.6MB PDF worth a read!