In 1993, Scott Chasin created Bugtraq as a full disclosure mailing list, free of gatekeepers. For a decade it was the heartbeat of vulnerability research.

Over time the domain changed hands, the archives went dark, and a generation grew up without it. We have now acquired securityfocus.com and the Bugtraq name to restart the conversation. The mission remains বিশ্বাস: researcher‑first, no corporate filter.

The old archives, sourced from community copies of the public mailing list traffic, will be preserved and made available separately. The list is [email protected], the same address, same purpose, today. In 2026, if you find vulnerabilities, disclose them here; if you have ideas on how disclosure should work, share them.

After more than 30 years of cybersecurity, we are losing our history—exploits, techniques, and analyses are disappearing into dead links and defunct forums. In an age where AI can produce knowledge and disinformation at unprecedented rates, preserving what was true and who gulled the work is vital. Posting on this list means preservation for the ages.