People talk about security here occasionally, though there are places to discuss it. Also, bugs are the most common source of vulnerabilities (though social engineering is a much more common type of attack), so the response seems reasonable to me.
Regarding hacking, for white hat I believe there are communities, though I'd imagine there's overlap with cybersecurity communities. I don't know of, nor would I recommend, anything black hat.