Jason Lotito has posted a small (but growing) list of resources related to security and PHP. There are links to the [phpsec] mailing list and plenty of reads that will keep you busy for hours.