With dozens of vulnerabilities and hacking tools released every week, it is difficult for a security professional to keep up with the latest, greatest news and tools.  One of the most popular security websites is SecurityFocus which provides great news and tech articles relating to security and the ever popular Bugtraq vulnerability mailing list.  It also has great primers on security technologies.

While SecurityFocus also has newsletters, mailing lists, and Bugtraq (read information overload), I use SecuriTeam's mailing list to feed me important security updates without flooding my inbox.  SecuriTeam's website provides an excellent searchable database of security articles, tools, exploits, and vulnerability notices collected from a variety of sources.  You can signup for these notifications via email or use the RSS feed. 

For those that are not quite security junkies who enjoy reading shellcode and buffer overflow exploits on Monday morning, both SecurityFocus' and SecuriTeam's websites are useful for searching for threats against the various applications, operating systems, and network devices you may be deploying or maintaining.

As a sample of the types of content available, here are a few interesting links:

• Read about BIOS Rootkits - SecurityFocus
• Learn the basics for securing Apache 2 -SecurityFocus
• Security Testing Demystified - SecuriTeam
• Three part series on Windows Rootkits - SecurityFocus
• Code for DOSing a Cisco Aironet access point - SecuriTeam
• Performing web browser forensics - SecurityFocus