Update SECURITY.md

Author: fisker

SECURITY.md

@@ -1,3 +1,5 @@
-Angular is part of Google [Open Source Software Vulnerability Reward Program](https://bughunters.google.com/about/rules/6521337925468160/google-open-source-software-vulnerability-reward-program-rules). For vulnerabilities in Angular, please submit your report [here](https://bughunters.google.com/report).
+## Security contact information
 
-For more information, check out [Angular's security policy](https://angular.dev/best-practices/security).
+To report a security vulnerability, please use the
+[Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.