One place to go is SecurityFocus. They host the Bugtraq list.

AO also has it's own Security Newsletter (published whenever I get enough articles.. I NEED MORE ARTICLES, MEMBERS!). You can find the latest batch here.

Hope that helps.