Their blog is pretty good: http://blog.sucuri.net.

I also like: http://taosecurity.blogspot.com and http://scheneier.com