1. Source-selection criteria

AdvisoryLoom favors sources that are identifiable, relevant to cybersecurity, attributable, and capable of supporting a recoverable original-source link. Selection does not imply endorsement of every claim.

• Authoritative primary sources: government advisories, vendor security bulletins, vulnerability authorities, and direct incident or research disclosures.
• Established reporting and research: recognized cybersecurity publications, independent research organizations, and professional security resources with clear attribution.
• Educational and contextual material: professional training, analysis, and technical resources that help readers understand a security development.
• Sources may be limited or excluded when authorship, provenance, original links, factual support, or commercial intent cannot be evaluated reliably.

2. Priority classifications

Priority is AdvisoryLoom editorial context, not a replacement for an organization-specific risk assessment. A priority card is public only after human review.

Critical

Immediate review is warranted because the issue presents severe potential impact, confirmed or highly credible active exploitation, an emergency vendor action, or a comparable urgent condition.

High

Prompt review is warranted because the issue may materially affect exposed products or environments and requires timely assessment or action.

Medium

The development is important and should be evaluated through normal security operations, but available evidence does not support an immediate emergency classification.

Low

The issue has limited known exposure, limited impact, or primarily routine operational significance.

Informational

The item supports awareness, education, planning, or context and does not by itself indicate a required security action.

3. Corrections, clarifications, and retractions

AdvisoryLoom corrects its own editorial context transparently. Material changes receive a dated public notice explaining what changed. Clarifications improve meaning without reversing the original conclusion; corrections repair a substantive error; retractions identify content that should no longer be relied upon.

Imported publisher content remains attributable to its original source. Readers should also consult the original publisher for corrections to the underlying report.

No public AdvisoryLoom corrections, clarifications, or retractions are currently recorded.

4. Sponsored content and commercial independence

Sponsored relationships are labeled clearly. Payment or sponsorship may not influence source selection, story clustering, priority rankings, reviewed intelligence conclusions, or recommended actions.

5. Use of artificial intelligence

Automation or AI may assist approved classification, extraction, drafting, translation, or prioritization workflows. AI output is treated as candidate material, not verified fact. AI-generated remediation advice or other user-facing guidance requires qualified human review before publication or recommendation.

Automated duplicate clustering is a local relevance process and does not approve editorial intelligence or remediation guidance.

6. Editorial review and auditability

Reviewed Why This Matters cards record the source, priority, affected environment, exploitation status, recommended action, reviewer, review date, publication decision, and revision history. Candidate or incomplete intelligence remains private.

7. Original-publisher attribution

AdvisoryLoom preserves the original publisher’s title, source attribution, and original-source URL whenever available. AdvisoryLoom commentary is labeled as editorial context and is not presented as the publisher’s original reporting.

Request a correction

Provide the story URL, the statement at issue, and a reliable supporting source. tips@advisoryloom.com