I’m not sure how this is going to work out yet, but I’m making the switch away from mailing list for a couple of my key security sources — most importantly, Full Disclosure and Bugtraq.
A few I’ll still interact with through my mail client, i.e. those that I participate actively in more often, but for the majority of them I’m going to be moving to RSS. Here’s a short list of feeds you might want to look at:
And here’s a comprehensive list from seclist.org.