Are we allowed to suggest our own blogs? ;)

Either way:

https://github.com/paragonie/awesome-appsec - Everything on this list is at least worth consideration