Corrections Policy
Last updated: 1 September 2026
We get things wrong sometimes. When we do, we fix it in the open — this page explains exactly how, and how to tell us about a mistake.
Found an error? Email [[email protected]] with the article URL and what is wrong. We read every message and reply to the ones that need a reply. You can also use our contact form and pick “Correction”.
1. What counts as a correction
Security reporting ages quickly, so we distinguish between fixing an error we made and adding information that did not exist when we published.
| Situation | What we call it |
|---|---|
| We stated something that was untrue when we published it | Correction |
| We stated something true but misleading, or missed context that changes the reading | Clarification |
| Facts changed after publication — a patch shipped, a CVE was rescored | Update |
| A typo, a broken link, or a formatting fault | Fixed silently |
2. How we fix each one
Corrections
We fix the text and add a dated note at the foot of the article saying what was wrong and what it now says. If the error was in the headline, the note goes at the top instead, where nobody can miss it.
Serious corrections
If the central claim of a story was wrong — the wrong product, the wrong severity, the wrong conclusion — we quote the original claim in the correction note so the record is complete. We do not quietly rewrite a story and pretend the first version never existed.
Clarifications
The wording changes and a dated clarification note explains what was ambiguous. The original meaning is not removed from the record.
Updates
Added as a dated block, usually at the top for anything urgent. The original text stays exactly as published, because readers who saw it earlier need to know what they read.
Typos and broken links
Fixed without a note. A missing comma is not a matter of record.
3. When an article is withdrawn
We withdraw an article only when it is wrong in a way no correction can repair, or when leaving it up would put people at risk. The URL stays live and carries a note explaining that the article was withdrawn and why. We do not delete pages to make a mistake disappear, and we do not remove articles because a vendor asked us to.
4. How quickly we act
| Type | Target |
|---|---|
| Anything that could cause a reader to make an unsafe change | Same day |
| Factual correction | Within one working day |
| Clarification | Within two working days |
| Typo or broken link | Next time we touch the page |
If a mistake could lead someone to weaken their own security, we act on it first and finish the paperwork afterwards.
5. What helps us verify a report
- The article URL and the sentence you are pointing at.
- What you believe is correct.
- A source we can check — a vendor advisory, a CVE record, or your own reproduction.
We verify every reported error before changing anything. If we conclude the article was right, we will tell you why rather than leaving the message unanswered.
6. Who is accountable
The editor is responsible for every correction on this site and signs off on each one. Corrections are never made by the author alone, and never made silently on a story that mattered. The wider standards these sit inside are set out in our Editorial Policy.
7. Contact
Corrections: [[email protected]]
Editor: [[email protected]]
Or use our contact form.