Editorial standards

CybersecurityNews.ca reports on cybersecurity for Canadian organizations and the people who run them. These are the rules we follow so you can rely on what we publish.

Last updated: October 20, 2026

• We link to primary sources wherever we can: the vendor's advisory, the Canadian Centre for Cyber Security, a regulator's decision, a court filing or the organization's own notice.
• We confirm facts with at least one source we can name or document. When a claim comes from a single party, such as a ransomware group's leak site, we say so and do not present it as confirmed.
• Numbers (people affected, records exposed, amounts paid) come from the organization or a regulator. When they are estimates, we say whose estimate it is.

• We contact organizations named in a breach or incident story before we publish and include their response, or say that they did not respond.
• We do not publish stolen personal data, and we do not link to leak sites or to working exploit code.
• We do not name the victims of a breach who are private individuals.

When a reader or researcher tells us about an unpatched vulnerability, we work with the affected organization and, where useful, the Canadian Centre for Cyber Security before publishing details that could put people at risk. To report a vulnerability in our own site, see our security.txt or write to [email protected].

• Advertisers and sponsors have no say over our news coverage or our review ratings. Sponsored content is always labelled "Sponsored" (see Advertise).
• Product reviews state how we tested and whether a review contains affiliate links.
• Writers disclose any financial or personal interest in a company they cover; when one exists, someone else covers the story.

News reports what happened. Analysis explains why it matters, based on reporting. Opinion is one person's argument and is labelled as such. Explainers and guides are kept up to date and show when they were last reviewed.

We correct mistakes quickly and openly: see our corrections policy. For anything else about our journalism, write to [email protected].