All Drupal security announcements are posted to an email list.

If you run a Drupal site then keep up to date with security announcements from the Drupal team by   subscribing to email: log in to your https://www.drupal.org/user, go to your user profile page and subscribe to the security newsletter on the Edit » My newsletters tab.