Selecting and cross-checking sources
We prioritize statements from affected organizations, specialist agencies, vendors and research reports with a defined methodology. Independent sources are cross-checked where possible. If there is only one source, the article must state that limitation.
Every important fact needs a reference link and a timestamp. Distinguish the event date, the source's publication date and the article's publication date.
Claims do not automatically become facts
Leak-site claims are recorded as statements by the party making them. We do not assume that an organization on a list has been compromised, that data has been stolen or that a ransom has been paid.
Headlines must not exaggerate severity, speculate about victims or assign responsibility without evidence. A ransomware family must not be attributed from a single extension or ransom note.
Verification levels
Verified: the facts stated in the article have been cross-checked against the described sources or evidence. Under verification: leads exist and some checks are incomplete. Not independently verified: information comes from one party, without separate corroborating evidence.
Status always includes scope. Confirming that an advisory exists is different from confirming a new incident or validating all conclusions of the publisher.
Transparency about interests and AI assistance
The relationship with TUNGTEK is disclosed when case records are used, and service content is kept separate from editorial content. We do not imply that an article underwent independent review if it did not.
AI may assist with drafts, structure and illustrations. AI-generated images must be labeled as illustrations and must not replace evidentiary images. Facts must be traceable to sources; unverified information must not be added simply to make an article more substantial.
Updated: 04/10/2026 · Contact and correction requests