You probably know this one already, but to stay on top of security updates in Rails, you should subscribe to this mailing list. There’s also one for Ruby and important Ruby gems.
There are also regular updates to this site, so also subscribe to this site’s newsletter to hear about them first.