Recently there was a mail send to only owners/admins the moment the SessionReaper vulnerability patch for Magento was available. We would like to receive an alert through slack/mail etc when a new critical patch is available. Or even better when a vulnerability is detected, like through magereport. We already have our own alerting based on repository / composer versioning, but it's possible the versioning is updated later, especially with a critical patch because of zero day risk.