Owasp - I’m a member of the London Chapter, these guys are the best when it comes to securing Web Application
QAForums - A decent forum although sometimes you may have to browse hard to find a good thread or someone who actually knows a thing or two about testing. There are quite a few good testers who do hang out there.