Added security contact information

Author: mfazekas

README.md

@@ -114,6 +114,9 @@ Or, you can do it the hard way (without Rubygems):
 *   ruby setup.rb config
 *   ruby setup.rb install (might need sudo privileges)
 
+## Security contact information
+
+See [Security.md]
 
 ## LICENSE:
 

SECURITY.md

@@ -0,0 +1,4 @@
+## Security contact information
+
+To report a security vulnerability, please use the
+[GitHub vulnerability reporting feature](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability).