By way of Dana Epp (pointing at Michael Howard's post):
I noticed Michael mention some new e-learning clinics on security that Microsoft is hosting. I was kinda interested in the developer focused one which is Clinic 2806: Microsoft® Security Guidance Training for Developers.
Look at this list of topics for Clinic 2806:
Essentials of Application Security
This is a great way to introduce your application developers to the basics of security. I have listened to some of the sessions, and this is great stuff. And the best part, its free! Great job, Microsoft!