close

BUGTRAQ

The security community's vulnerability disclosure mailing lists. Founded 1993. Restored 2026. Independent and community-driven.

The Original

Bugtraq

[email protected]

Curated vulnerability disclosures and security advisories across the full spectrum — proprietary software, open source, hardware, firmware, embedded systems. Moderated for quality and substance.

Subscribe Archives SecurityFocus
New

Bugtraq.AI

[email protected]

Vulnerability research in AI and machine learning systems — model exploits, inference attacks, training data poisoning, framework vulnerabilities, adversarial ML, and agentic systems.

Subscribe Archives bugtraq.ai

History

1993
Scott Chasin founds Bugtraq as a mailing list for detailed vulnerability discussion.
1996
Aleph One takes over moderation. Bugtraq becomes the primary channel for vulnerability disclosure worldwide.
1999
SecurityFocus launches around Bugtraq, building the BID vulnerability database.
2002
Symantec acquires SecurityFocus. Bugtraq continues under corporate stewardship.
2019
BID vulnerability database stops updating. Broadcom acquires Symantec's enterprise division.
2020
Posts stop being approved. Accenture acquires Symantec's Cyber Security Services from Broadcom, including SecurityFocus.
2021
Accenture announces shutdown, reverses course under community pressure, then goes permanently silent. The last message is posted January 17, 2021.
2026
SecurityFocus is acquired and restored under independent, community stewardship. Bugtraq is back.

The historical Bugtraq archives are preserved by MARC (1993–2021) and Openwall (2003–2021).