Skip to content
eastbaycyber

Editorial Policy

This page explains how East Bay Cyber produces, sources, checks and corrects what we publish, so readers can judge how much weight to give it.

Who we are

East Bay Cyber is an independent cybersecurity publication for IT and security teams at small and mid-size organizations. Articles are published under the East Bay Cyber Security Research Desk, and reviewed by the East Bay Cyber editorial team, which also sets the standards on this page and handles corrections. We are not owned by, and do not take editorial direction from, any security vendor.

How articles are produced

We use AI tools to help research and draft articles at the speed vulnerability news demands. AI assistance never replaces sourcing: every article is built from primary sources, and automated checks run before anything is published:

  • Vulnerability data (CVSS scores, affected and fixed versions, exploitation status) comes from the NIST National Vulnerability Database, the CISA Known Exploited Vulnerabilities catalog, and vendor security advisories. We do not invent our own severity scores.
  • CVE pages publish automatically, within hours of disclosure, only after passing an automated check against the official CVE record (vendor, product and status). An editor then reviews published CVE pages on a rolling basis and corrects, rewrites or pulls anything that does not hold up. Pages that fail the automated check are never published and are rewritten instead.
  • News digests summarize reporting from named sources, which are linked.
  • Tool comparisons are limited to publicly documented capabilities. We do not publish benchmarks, test results or prices we cannot verify.
  • Automated quality gates check internal and external links, flag repetitive or generic writing, and block articles that are missing required sourcing.

When a detail is not yet known, for example before a vendor publishes a fix, we say so rather than guess, and we update the article when it becomes available.

What we will not publish

  • Sponsored rankings, pay-to-play placements or vendor press releases presented as editorial.
  • Sensationalist headlines or claims of exploitation that are not supported by a primary source.
  • Personalized legal, compliance or financial advice. Our content is general information.

Affiliate relationships

Some pages contain affiliate links, which are labeled where they appear and marked as sponsored links. Affiliate relationships do not decide which products we include or how we rank them. See our Disclaimer.

We occasionally publish clearly labeled sponsored articles. They are never mixed into our comparisons or CVE coverage. See our Sponsored Content Guidelines.

Updates and freshness

Each article shows the date it was last updated. Vulnerability articles are revisited when NVD, CISA or the vendor publishes new information, and a weekly process checks external links and flags pages whose sources have moved or disappeared.

Corrections

If you find an error, email the page URL and the specific claim to . The editorial team reviews every report, corrects confirmed errors promptly, and updates the page's date when a correction changes the substance.