There are some very interesting posts on this blog: http://securitylabs.websense.com/content/blogs.aspx

It's all about breaking security issues, all the posts seem to be well investigated and well written.