Academic journals for latest RE/Malware/Exploitation research?

You have a few academic workshops and conferences about the topic (or close to the topic). But, most of them are appearing and disappearing quite often unfortunately. So, it is difficult to come with a long lasting list of conferences. Anyway, here is an attempt:

Still Alive Conferences

• RAID (International Symposium on Research in Attacks, Intrusions and Defenses) (21 years old)
• Journal of Computer Virology and Hacking Techniques (Springer) (15 years old)
• WOOT (Workshop on Offensive Technologies) (12 years old)
• SSPREW (Software Security, Protection, and Reverse Engineering / Software Security and Protection Workshop) (8 years old)
• CODASPY (ACM Conference on Data and Application Security and Privacy) (8 years old)
• BotConf (Botnet fighting Conference) (6 years)
• EuroS&P (IEEE European Symposium on Security and Privacy) (4 years old)
• ROOTS (Reversing and Offensive-oriented Trends Symposium) (2 years old)

Discontinued Conferences

• WCRE (Working Conference on Reverse Engineering)
• SPRO (Workshop on Software PROtection)

These lists are definitely non-exhaustive, so feel free to tell me if I forget something!

This is an indirect answer to your question, but hopefully still useful. There are multiple conferences that feature state-of-the-art work in this space. If anyone knows of more, feel free to add on to this list.

(links are to the archives of the conferences, whenever possible)

• Infiltrate
• OffensiveCon
  • Videos are posted on their YouTube channel
• RECon
  • Frustratingly, they don't have a consistent method of posting slides/recordings. The link above is to their archives, but some of its links are broken, and not all the available slides/videos are linked in there.
  • Generally, you can get to a year's contents by going to recon.cx/<year> (e.g. https://recon.cx/2017). Most of the time those pages have links to the slides and/or recordings from that year.
    • You can sometimes find missing stuff by googling the name of the talk; often the author will have posted the slides themselves. There are also various YouTube recordings floating around of various talks from various years.
  • Montreal 2018 is an exception to this rule. As they announced on Twitter, they decided to embed the slides in the schedule, for some reason.
  • Montreal 2019 is another exception. Confusingly, their videos are under the 2020 site.
• USENIX Workshop on Offensive Technologies (WOOT)
• USENIX Security Symposium
• CanSecWest

There are of course the juggernauts: DEF CON (full media archive, YouTube playlists of talks) and Black Hat (site archive with slides + white papers, YouTube playlists of talks). Neither is exclusively focused on what you asked about, but they both have plenty of good content on these topics.

Bonus: PoC||GTFO is a completely different style of research than any conference listed above, but it's full of great information and is lots of fun to read.

There is also malware conference which has been running since at least 2011. https://www.malwareconference.org/