My article ("What's New in ModSecurity"), which describes the most important improvements in 1.9, has just been published on O'Reilly Network. It covers the rule engine enhancements, real-time audit log aggregation facilities, and the stateful request monitoring features. It's a good read if you've been running 1.8.x and want to catch-up.