I almost feel bad including this because everyone knows you should apply all security updates as soon as possible. Here's some pointers for staying on top of security updates:- Updates always come out on Wednesday afternoon Eastern time- You can find all security advisories for core and contrib, as well as security PSAs, on Drupal.org- To receive e-mails when new security advisories are posted: edit your account on Drupal.org, click "My newsletters", check the "Security announcements" checkbox and click "Save"- Install the "Update manager" module, and see the "Available updates" report to see if there are any unapplied security updates on your site!