The SANS Institute released its top 20 security risks for 2007, which documents the security arms race between cyber criminals and the folks playing defense. But let’s focus on the big scourge–zero day attacks:
http://blogs.zdnet.com/security/?p=691

SANS Top-20 2007 Security Risks (2007 Annual Update):
http://www.sans.org/top20/

Urs