I was involved in creating something similar a couple of years ago - http://www.websecuritywatch.com/ http://www.websecuritywatch.com/ My advise would be - agg

I was involved in creating something similar a couple of years ago - http://www.websecuritywatch.com/ http://www.websecuritywatch.com/ My advise would be - aggregate! There most annoying aspect in security news tracking is wading through multiple iterations/announces about the absolutely same vulnerability. Of course that type of aggregation is much easier said than done :)