As with any other server software, you need to keep up to date with new Apache releases, making sure you are aware of security issues and the patches or workarounds to address them. These URLs will help you with this task.
Apache announcements mailing list : http://httpd.apache.org/lists.html