Standards and method
Editorial policy
Where CyberSIXT coverage comes from, how it is written and checked, and how corrections are made.
CyberSIXT monitors a curated set of security news outlets and vendor and government advisories. Each new article is summarised, connected to the CVEs, vendors and threat actors it names, and listed with a link to the original.
Summaries and headlines
Summaries are produced with automated tools from the original article only, and attribute each claim to whoever made it. Headlines are plain statements of what happened: we avoid sensational or advisory wording, and when a headline does not meet that standard the outlet’s own title is used. Where an article cannot be read in full, we link to it rather than summarise it.
Summaries can contain errors; the original article is the reference, and every page links to it.
Vulnerability data
CVSS scores and descriptions come from NVD, exploitation status and federal deadlines from the CISA Known Exploited Vulnerabilities catalogue, and exploit probability from FIRST EPSS. These values are shown as published by those sources. A CVE is called exploited only when CISA lists it.
The Briefing
The Briefing is published each morning from the previous day’s coverage. Every statement cites the coverage it comes from, and facts such as CVE IDs and figures are checked against that coverage before publication.
Source selection
Sources are primary advisories, vulnerability databases, government and CERT publications, vendor disclosures, and established security outlets that cite their sources.
Source attribution
Each article links to the advisory, disclosure or report it is based on. CVE, vendor and threat-actor timelines list coverage in the order it was published.
Corrections and updates
Errors can be reported through the contact page. Summaries can also be compared with the original article, which every page links to.
Editorial independence
CyberSIXT has no sponsor, affiliate or vendor relationship that decides what is covered.
Disclaimer
CyberSIXT is an informational publication. It is not legal, investment or professional security advice. The original advisory or report is the reference for any decision.