New Web Application Security Mailing List
An anonymous reader writes "For those slashdotters interested in web application security, WASC (Web Application Security Consortium) has created a new mailing list aply named 'The Web Security Mailing List.' The list is open for discussing important topics such as new attacks types and vulnerabilities, software development, solutions, application firewalls, web servers, database security, tools, etc."
but it still looks like a good source of information.
I also use http://www.sans.org/newsletters/ to keep up to date.
What other resources do people here use to make sure that your server applications are up to date?