Editorial Standards
ZeroDayFeed covers cybersecurity accurately and plainly, for people who have to act on the news. This page sets out how we report, source, and check what we publish — and how we use AI.
What we report
We report facts about publicly disclosed incidents, vulnerabilities, and advisories. We distinguish clearly between what a victim, vendor, or agency has confirmed and what an attacker or a single report claims. We do not publish stolen data, and we do not name individuals whose information was exposed.
Sourcing
Every article cites primary sources — CISA advisories and the Known Exploited Vulnerabilities catalog, NVD and CVE records, vendor security advisories, and court or regulatory filings (including SEC disclosures and breach notifications) — plus reputable security and news outlets. Each article cites at least three sources, with at least one primary source, listed openly in a "Sources" section at the foot of the piece. We do not rewrite a single outlet's story.
No exploit code or attack instructions
We explain what a vulnerability or attack does and how to defend against it. We never publish exploit code, proof-of-concept payloads, or step-by-step instructions for attacking systems, and we do not link to them.
Fact-checking
Before publication, every article passes an automated review that confirms its sourcing requirements are met and verifies that each cited link resolves to a live page — so readers never hit dead citations. Factual claims are grounded in the cited material; where a figure or date is uncertain, we say so rather than guess. When new findings supersede old reporting, we update.
How we use AI
We are transparent about this: ZeroDayFeed articles are drafted with AI assistance, working from sources gathered and read for each story. Bylines on this site are AI-assisted desks, and every byline says so. Every article is checked against its cited sources and reviewed by the publisher before release — nothing goes live unreviewed. We do not mass-publish unsourced content.
Our desks
Articles carry a desk byline, each with a defined beat and a published description:
Corrections
This field moves fast, and early reports can change. We aim to be clear about what is confirmed versus expected, and we correct mistakes promptly when they are brought to our attention. To report an error, email [email protected] with the article and the correction.
Independence
Editorial decisions are made independently of any advertising on this site. Advertising relationships, where they exist, never influence what we cover or how we cover it.
Not professional advice
ZeroDayFeed is an independent publication and is not affiliated with CISA, any government agency, or any vendor. Coverage is for general information; follow your vendor's official guidance when patching or responding to an incident. For questions, corrections, or partnerships, reach us at [email protected].
