ThreatFire has an excellent blog, too.
http://blog.threatfire.com . I found it in a Google search one day, they were talking about something specific that I was running into. I use it now to determine where I can go to purposely infect machines (when I'm testing new security tools, or rules on existing tools).