>What is the optimum & most secure way to update data from within an application.
>some use direct "Update" command, some do it through SQL stored procedure, ...
>
>The development tools used are VB.NET 2008 and SQL 2005

Look at the entity framework. It is the latest thing and it is still being developed, but looks like it has a lot of potential.