Skip to content

Editorial Policy

How we select sources, verify incidents and label what we know.

Source selection

Sources are chosen from government and institutional advisories, established security publications and research teams. Each source has a trust tier and licensing notes visible to our editors.

Verification states

Every incident carries one of six states: Confirmed (official disclosure or strong independent evidence), Reported, Under Investigation, Disputed, Corrected or Retracted. We never label an incident Confirmed on the basis of a criminal group's own claim.

Manual review

Stories involving attribution to a named actor, sensitive personal data, large claimed losses, single low-confidence sources or critical severity are routed to a human review queue before publication.

What we never publish

We do not publish stolen data, credentials, leaked databases, exploit code or step-by-step intrusion instructions.

Questions or corrections? Contact the editors.