Editorial Standards

Source-first reporting

• Prefer original advisories and canonical CVE, KEV and ATT&CK identifiers.
• Record publication dates and last-checked dates.
• Distinguish a source’s claim from independently confirmed facts.
• Avoid presenting inferred campaign links as confirmed correlations.

Automated content

Imported records may be updated automatically. Machine-generated summaries must be visibly distinguishable from source quotations and human analysis. Claims that require validation should enter an editorial review workflow before publication.

Corrections

Provide a way to flag an inaccurate entry, preserve a history of meaningful corrections and reassess risk information as original sources change. This page describes editorial principles; live workflows should be confirmed by the site administrator.