My article ("What's New in ModSecurity"), which describes the most important improvements in 1.9, has just been published on O'Reilly Network. It covers the rule engine enhancements, real-time audit log aggregation facilities, and the stateful request monitoring features. It's a good read if you've been running 1.8.x and want to catch-up.
Blogs & Stories
SpiderLabs Blog
Attracting more than a half-million annual readers, this is the security community's go-to destination for technical breakdowns of the latest threats, critical vulnerability disclosures and cutting-edge research.