Sophia Antipolis, France, August 7th, 2026, CyberNewswire
In a significant announcement at DEF CON 34 in Las Vegas, security researcher Jonathan Brossard, widely recognized in the cybersecurity community as endrazine, revealed the revival of the original Bugtraq mailing list. Established in 1993, Bugtraq has long served as a cornerstone in discussions regarding cybersecurity vulnerabilities, mitigations, and advanced techniques, shaping the landscape of information security.
With an impressive catalog of over 120,000 references from the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE), the Bugtraq mailing list and its associated website, securityfocus.com, stand as a foundational resource for Product Security teams and the broader information security community. These platforms are distinguished by their commitment to providing high-quality, moderated information free of charge, enabling researchers and professionals to access essential data without barriers. Remarkably, SecurityFocus remains a primary technical reference for approximately one-third of all cataloged vulnerabilities, reinforcing its importance in the cybersecurity realm.
The need for a reliable repository of cybersecurity information has grown increasingly urgent in today’s fast-paced digital landscape. As valuable research and discussions can easily vanish amid the transient nature of social media, paywalls, and inaccessible content, the re-establishment of Bugtraq serves as a critical step towards preserving the legacy of cybersecurity information. Jonathan Brossard emphasized the impending necessity of a platform where security researchers can share their findings and have their work archived for future reference, highlighting the mission of Bugtraq to foster collaboration and knowledge sharing within the community.
Bugtraq is not merely a mailing list; it is an open community service aimed at supporting all security researchers, ensuring accessibility to vital information without commercial intent. "At the end of the day, Bugtraq is what its users make of it," Brossard stated, underlining the collaborative essence of the platform. He further added, "We are providing the platform. The community decides what it becomes," reflecting a commitment to collective growth and engagement among users.
In light of this revival, Brossard detailed the structure of SecurityFocus, which will now feature two distinct lists designed to accommodate the varied needs of the cybersecurity community. Jeff Moss, founder of DEF CON, publicly welcomed this revival on the mailing list, asserting, “I believe the bug belongs to the finder and hopefully this can become a neutral place to discuss them.” His endorsement underscores the anticipated positive impact of this platform on discussions surrounding vulnerabilities and their mitigation.
Subscriptions and archives for the revitalized Bugtraq can be found on its official websites: securityfocus.com and bugtraq.ai, providing a comprehensive portal for researchers seeking to engage with the wealth of information available.
The announcement also came with expressions of gratitude to past moderators who have contributed invaluable service to the mailing list over the years. Both esteemed and anonymous figures have played a crucial role in developing Bugtraq into a significant source of information that practitioners rely on daily. Acknowledgment was also given to Solar Designer for preserving Bugtraq’s archives, a move that has safeguarded a trove of data essential to the cybersecurity domain.
In a bid to further enhance the community, there is a call for volunteers who possess experience in moderating full disclosure mailing lists to come forward. Those with time to contribute and a genuine desire to support the cybersecurity community are encouraged to reach out.
About Bugtraq
Founded in 1993, Bugtraq stands out as one of the longest-running cybersecurity mailing lists, serving as the primary conduit for vulnerability disclosures, security advisories, and original research over its more than two-decade history. The mailing list is now independently operated and hosted at securityfocus.com, continuing its mission to provide a platform for the exchange of critical security insights and knowledge among professionals in the field.
Security Researcher Jonathan Brossard
MOABI Solutions
Email Contact
In summary, the revival of Bugtraq represents a renewed commitment to fostering collaboration and transparency within the cybersecurity community, offering a stable, open platform that honors the past while paving the way for future advancements in information security.

