I realize not everyone finds infosec/vulnerabilities super-interesting; but I think reading the nominations (and associated links to research) shows an interesting "state of the union" in security research for 2011.

The first nomination (for Padded Oracle) came in super-handy for me a few times this year.