Editorial Policy
How we select sources, verify incidents and label what we know.
Source selection
Sources are chosen from government and institutional advisories, established security publications and research teams. Each source has a trust tier and licensing notes visible to our editors.
Verification states
Every incident carries one of six states: Confirmed (official disclosure or strong independent evidence), Reported, Under Investigation, Disputed, Corrected or Retracted. We never label an incident Confirmed on the basis of a criminal group's own claim.
Manual review
Stories involving attribution to a named actor, sensitive personal data, large claimed losses, single low-confidence sources or critical severity are routed to a human review queue before publication.
What we never publish
We do not publish stolen data, credentials, leaked databases, exploit code or step-by-step intrusion instructions.
Questions or corrections? Contact the editors.