The Oracle Security Management team (John Heimann et al) has just rolled out a new, "official" blog about Oracle security. Nothing there of momentous substance yet but that's sure to change as events unfold.
This is a welcome addition to a frequently "one-sided" conversation!