www.cert.org is a bit old. I mean the security issues they discuss about are quite old. They don't discuss about all security issues but only specific ones. Their RSS service isn't that good either. On the other hand I think the SecurityFocus RSS service is excellent. Never been to SANS. What is is about exactly ?