Bugtraq was the security community's mailing list. Founded in 1993 by Scott Chasin, it became the primary channel for vulnerability disclosure, security advisories, and original research for over two decades. When it mattered, it was on Bugtraq.
After Symantec's acquisition of SecurityFocus in 2002, the list slowly declined. Broadcom stopped updating the BID database in 2019. Accenture acquired the remains in 2020, tried to shut Bugtraq down, reversed course under community pressure, then went permanently silent. The last message was posted January 17, 2021.
SecurityFocus is now under independent, community stewardship. Bugtraq is live again — curated, moderated, and open to submissions from security researchers worldwide. We're also launching a second list dedicated to vulnerability research in AI and machine learning systems.
The historical Bugtraq archives are preserved by MARC (1993–2021) and Openwall (2003–2021).