My favourite site for keeping track of the risks is askwoody.com. Susan Bradley keeps track of all the patch side-effects and is very clued-up on the merits of patching for a business versus for a consumer system, plus there’s a knowledgeable community who contribute their experience. But if you want a deep dive into what’s broken and what’s under attack, nothing beats Leo’s recommendation of Bleeping Computer.