CERT and SANS both have good stuff

http://www.cert.org/

http://www.sans.org/