About

CyberROI — Return on Intrusion — is security news and analysis for the people who have to act on it: CISOs, security engineers and analysts.

What we cover

Breaches, actively exploited vulnerabilities, ransomware, cloud and AI security, regulation and the business of security. Every day our desk picks the story that matters most to practitioners and goes deeper than the headline: how it happened, who is exposed, what it could cost, and what to do this week.

The wire

Around the clock we follow the reporting of reputable security outlets, government advisories (including CISA's Known Exploited Vulnerabilities catalogue) and the discussion on Hacker News. Headlines that pass our editorial filter appear on the wire with a link to the original report. Vendor promotion, round-ups and unsourced rumours are left out.

"The Return"

Every article ends its opening with The Return: who is exposed, the concrete steps to take, and a verdict from Act now to Ignore the hype. It is our promise that each story earns the minutes you spend on it.

Editorial standards

We report what the sources support and say so when something is unconfirmed. Facts, figures and vulnerability identifiers come from the original reporting and advisories, which are credited and linked at the end of every article. Quotes are verbatim. We don't publish vendor pitches, and attribution to a threat actor is only reported with who made it.

Corrections

Security moves fast and details change as incidents unfold. If you spot an error, tell us: corrections are made promptly and noted on the article.