About us
Independent reporting on cyberattacks and vulnerabilities, and how much of each is actually confirmed.
What we cover
We cover breaches, exploited vulnerabilities and threat-actor activity as they are disclosed, checking each claim against advisories, filings and vendor statements and labelling how strong the evidence is.
Our approach
Our approach is simple: report what the documents and credible sources actually say, label how strong the evidence is, and be honest about what we do not know. We are neither believers nor debunkers by default.
How we work
An automated research desk monitors official sources and news outlets around the clock, groups related reports, reads the underlying pages, and drafts original, fully cited reports. Every automated draft goes through a second fact-checking pass against its sources before it can publish. Details are on our editorial standards page.
Contact & corrections
Spotted an error, have a question or a tip? Contact us — corrections go straight to our editors’ queue and we review and correct promptly.