Forget phishing for bank account passwords. The deepest threats to online security are the weaknesses in the fundamental protocols that run the Internet.

Blogs and Industry Publications

Blogs

Schneier on Security
http://www.schneier.com/blog/

Computerworld Security Blog
http://www.computerworld.com/blogs/security

Brian Krebs on Computer Security
http://blog.washingtonpost.com/securityfix/

RSA - Speaking of Security
http://www.rsa.com/blog/blog.aspx

Matasano Chargen
http://www.matasano.com/log/

360 Security
http://blog.ncircle.com/

Publications

Dark Reading
http://www.darkreading.com/

Security Focus
http://www.securityfocus.com/

CSO
http://www.csoonline.com/

TechTarget
http://www.techtarget.com/

Security
http://www.securitymagazine.com/

SecurityFocus
http://www.securityfocus.com/

Secure Coding (CERT)
http://www.cert.org/secure-coding/

Build Security In (US-CERT)
https://buildsecurityin.us-cert.gov/