LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦  LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test  ✦ 
φPHI CoMMφ — the vulnerability research community

About

Phicomm (short for phi community) was started in 2024 by a small group of researchers who were tired of scattered write-ups and slow vendor responses. We are a volunteer-run community, not a broker: we never buy or sell vulnerabilities.

Reports posted here are reviewed by moderators before being forwarded to the affected vendor. By posting, you agree to our coordinated-disclosure policy and a default 90-day embargo.

Moderators

Lead Moderator
Community lead

Keeps the queue moving and the vendors honest.

heapwalker
Triage volunteer

Memory-safety nerd. Writes the monthly roundup.

quietpacket
Triage volunteer

Network and web. Believes every report deserves a reply.