I've created a specialized training program for techies in Texas a couple of weeks ago.
Decided to focus on web application attacks and defense tactics.
The three-day training reached its summit with a friendly game of "capture-the-flag"
where the participants needed to locate a file containing 1000 fake credit cards on an internal
MS-SQL server and extract it somehow.