As Marcin said, twitter seems to be the security industry hangout. Watch the conference schedules/abstracts to get a good idea where the security industry is h

As Marcin said, twitter seems to be the security industry hangout. Watch the conference schedules/abstracts to get a good idea where the security industry is headed (some exploits will be revealed in those talks/papers.) Full-disclosure is OK, but I've never been able to follow it -- too noisy. Really, I think the best way is to keep track of the major vendors security advisory schedule (MS, Apple, Adobe, etc.) Those advisories will say which researcher has submitted the which report. By following those researchers, you will be able to keep out on top of the public research.