Who do you go to for security advice?

Do you have experience of participating in User Groups? Which ones would you recommend? Are they free of charge? Are there particular people you go to for security advice? What about security blogs - which do you find most useful?