Keeping up with the Joneses

With the SANS Top 20 Vulnerabilities list coming out on a yearly basis, information security professionals cannot afford to entirely rely on just one yearly source of information.

That is why security professionals should be subscribed to one or more (preferrably more) security mailing lists to stay on top of the latest happenings in information security.

One such list to subscribe to is the @RISK: The Consensus Security Alert:

Delivered every Thursday morning, @RISK first summarizes the three to eight vulnerabilities that matter most, tells what damage they do and how to protect yourself from them, and then adds a unique feature: a summary of the actions 15 giant organizations have taken to protect their users.

Two more great lists are the US-CERT Technical Cyber Security Alerts and Bugtraq.