I recommend the RISKS mailing list. https://seclists.org/risks/ But note that they sometimes take reliability too far.