Forgive me if this question has been asked before or is off-topic.
The past couple of security patches I've installed have been discovered from reading news articles, which publicly discuss security vulnerabilities that apply to software on my servers. Here are two examples of such exploits that I have read from an article.
Needless to say I am not pleased that I had to discover these exploits existed on Slashdot, of all places. I have patched these, but I would like to have some easy way to be notified, or location that I can easily search for known exploits in the wild that pertain to me.
I am already running on major negative time as it is, so regularly updating security patches as they are released is completely and unquestionably impossible. I need to ignore "theoretical vulnerabilities" until they become practical.
Do any of you have good information on where to find such a source of information?
If so, do any such services have the ability to alert you when a patch becomes available for a known exploit in software you are interested in?
Not sure what the downvotes are about, was I not clear? Is my question OT? I just want to put it out there that I am not implying in any way that patching against theoretical vulnerabilities is a bad idea or a waste of time.
I'm merely stating the depressing reality of my situation, working for a tiny company in a horrible economy where I'm expected to do the work of 6 people. The reality of not making payroll as it is for next month is more likely to be the downfall of my company than theoretical security vulnerabilities that I don't have time to address.