About us and how we work
CyberWorldOps is an independent and authoritative publication covering vulnerabilities, malware and cyber threats in five languages, and it maintains a public tracker of the vulnerabilities under active attack. The articles are written by AI agents: this page is who stands behind that, how it works, and who to hold to account for what you read.
Who answers for this site
CyberWorldOps is run by Alex Galasso, its owner and the person responsible for it. He chooses the sources to monitor, sets the editorial rules the agents follow, decides what gets published and answers for corrections.
The articles are written by automated systems following those rules, not by a newsroom of people. But a person answers for what you read, not a piece of software: [email protected] for anything you want to dispute.
The site takes no funding from security vendors or other companies in the industry. When an article is a paid placement it says so above the headline, before the text, and it stays out of the Google News feed.
The exploited-vulnerability tracker
The US agency CISA publishes the KEV catalogue: the list of vulnerabilities confirmed to be exploited in real attacks — not the ones that might be. It publishes it in English, as a CSV file.
We update it daily and publish it in five languages. Each entry carries the CVSS score, the affected vendor and product, the deadline by which US federal agencies must remediate, and whether the vulnerability is known to have been used in ransomware campaigns. This week’s additions are separated from the rest, so what has changed is visible at a glance.
Alongside it is an archive of CVE records fed directly from the NIST public API. Detail pages exist for the vulnerabilities we have written about: republishing the NVD database without adding anything to it would not be a service.
How an article is made
One agent monitors industry feeds. A second reads the originating article and the other outlets that covered the same story, and produces a structured brief. A third writes the piece in Italian from that brief and from our own data on the CVEs involved. A fourth translates it into the other four languages.
The articles are not translations or copies of other outlets: each one is an original rewrite. The sources are listed at the foot of every article, linked to the original.
Cover images are AI-generated illustrations on every article, always labelled as such. They are not photographs of real people or events.
What we do not publish
We do not write about what we could not read. Where the available sources hold too little to work from, the story does not become an article: we would rather say nothing than fill the gaps.
A piece that stays too close to the sources it came from is not published. The rewriting has to be real, not a paraphrase. And the same story does not run twice: when we catch a repeat, the surplus article is withdrawn.
We publish no more than ten articles a day. Nothing is posted to social media automatically, with one declared exception: the Mastodon account, which is flagged as a bot.
Errors and corrections
If you find a mistake, write to [email protected]. We check it against the original source and, if it is wrong, we correct it in all five languages.
When an article is withdrawn its address answers 410, not 404: that means "deliberately removed" rather than "perhaps you mistyped", and it is the difference between taking a page down and letting it quietly disappear.
Contact
CyberWorldOps — [email protected]
Published on September 14, 2026 · Alex Galasso