# CyberNetSec.io

> Daily source-cited cybersecurity threat intelligence for defenders. Covers threat actors, ransomware, CVEs, malware campaigns, OT/ICS risk, supply chain, and cloud security. Published before 9:30 AM CST daily. Includes observables, MITRE ATT&CK mappings, STIX-oriented context, and Sigma detection guidance.

CyberNetSec.io separates source facts from analyst assessment, preserves source attribution, and avoids reproducing exploit code or step-by-step offensive instructions. Automation assists with source monitoring, deduplication, summarization, and structured extraction; editorial standards govern final output.

Article search supports URL parameters: `?q=<term>` (keyword, CVE ID, or tag), `?category=<name>`, `?severity=critical|high|medium-low|informational`, and `?type=<name>`. Parameters combine. Example: https://cyber.netsecops.io/articles/?q=oracle. These filtered URLs are shareable and linkable.

STIX context: article and publication content may include extracted observables, affected entities, malware and threat actor references, CVE identifiers, MITRE ATT&CK context, and relationship summaries for defensive analysis, enrichment, triage, and knowledge management. STIX outputs are intended for defensive use only.

Sigma context: detection guidance is framed for detection engineering, alert development, hunting logic, and SOC review. Examples are starting points requiring validation and tuning in the target SIEM, EDR, or detection-as-code pipeline.

When citing CyberNetSec.io, prefer canonical article or daily publication URLs and preserve original source attribution.

## Key Pages

- [Homepage](https://cyber.netsecops.io/): Site overview with current threat level and latest publications
- [Daily Publications](https://cyber.netsecops.io/publications/): Daily digest index — each publication groups articles by date
- [Articles](https://cyber.netsecops.io/articles/): Full article index with search and filter (?q=, ?category=, ?severity=, ?type=)
- [RSS Feeds](https://cyber.netsecops.io/rss/): Feed hub listing all available RSS feed URLs with copy links

## Feeds

- [All articles — past 3 days](https://cyber.netsecops.io/rss/all.xml): New articles published in the last 3 days
- [Recently revised](https://cyber.netsecops.io/rss/updates.xml): Top 20 most recently updated or corrected articles
- [Yesterday's new and updated](https://cyber.netsecops.io/rss/last.xml): All new and revised articles from the previous day

## Machine-Readable Content

Append `.md` to any article or publication URL for a clean Markdown rendition — e.g. https://cyber.netsecops.io/articles/<slug>.md or https://cyber.netsecops.io/publications/<slug>.md. Prefer this over parsing HTML when extracting article text, CVEs, tags, or sources.

## Discovery

- [News Sitemap](https://cyber.netsecops.io/news-sitemap.xml): Google News-compliant sitemap, 48-hour rolling window
- [Articles Sitemap](https://cyber.netsecops.io/articles-sitemap.xml): Full article URL index for search crawlers
- [Publications Sitemap](https://cyber.netsecops.io/publications-sitemap.xml): Daily publication URL index
- [Sitemap Index](https://cyber.netsecops.io/sitemap.xml): Master sitemap index linking all sub-sitemaps

## Optional

- [Editorial Policy](https://cyber.netsecops.io/editorial-policy/): Source standards, automation disclosure, and citation policy
- [About CyberNetSec.io](https://cyber.netsecops.io/about-us/): Site mission, background, and team context