About
Security Signal collects cybersecurity news from official agencies, vendor security teams and the security press. Coverage of the same event is merged into a single story, and each story gets a confidence score based on who is reporting it.
Sources and trust levels
| Tier | Score | Sources |
|---|---|---|
| 1. Official | 90 | CISA Known Exploited Vulnerabilities, CISA Advisories, UK NCSC, CERT-EU Advisories, MS-ISAC Advisories, Microsoft Security Response Center, Cisco Security Advisories, Fortinet PSIRT, Palo Alto Networks Security Advisories, AWS Security Bulletins |
| 2. Security press | 70 | BleepingComputer, The Record, SecurityWeek, Dark Reading, The Hacker News, Krebs on Security, The Register (Security), Help Net Security |
| 3. Vendor research | 60 | Microsoft Security Blog, Cisco Talos, Unit 42, Sophos News, Check Point Research, ESET WeLiveSecurity |
| 4. Community | 30 | r/netsec |
How the confidence score works
- A story starts with the score of its most trusted source (official 90, security press 70, vendor research 60, community 30).
- +5 for each additional independent organisation reporting it, up to +15.
- +10 when an official source covers it or one of its CVEs is in CISA’s Known Exploited Vulnerabilities catalogue.
- Stories reported only by community sources are capped at 40, marked Unverified and hidden unless you choose to show them.
Labels: Confirmed 85 or more · Corroborated two or more independent sources · Reported one trusted source · Unverified community only.
Content and copyright
We show headlines, the publisher’s name, dates and links to the original articles. We don’t copy articles, images or logos. The one-line summaries are written independently and generated automatically, so they can be wrong; always read the original. Vulnerability data comes from CISA, NVD and FIRST.
We don’t link to leaked data, paste sites or criminal forums, and we remove personal contact details from anything we store.