point to PVR, drop link to curl vuln process

Author: vszakats

SECURITY.md

@@ -4,13 +4,9 @@ SPDX-License-Identifier: curl
 -->
 # Security Policy
 
-See curl's
-[SECURITY-PROCESS.md](https://github.com/curl/curl/blob/master/docs/SECURITY-PROCESS.md)
-for full details.
-
 ## Reporting a Vulnerability
 
 If you have found or just suspect a security problem somewhere in trurl,
-report it on [https://hackerone.com/curl](https://hackerone.com/curl).
+report it via <https://github.com/curl/trurl/security>.
 
 We treat security issues with confidentiality until controlled and disclosed responsibly.