Terms & disclaimer

This site reports the news. It does not give advice.Nothing here is security, legal, financial or professional advice, and nothing here should be acted on without your own verification and judgment.

Whose views these are

Nothing published here represents the views of any person, employer, client, organisation, or company. Not the author's employer — past, present or future. Not any company the author has worked with, advised, or been associated with. Not any vendor, publication or research group whose work is linked or discussed. Not any colleague, co-worker or acquaintance.

This is a personal project, written in a personal capacity, on personal equipment, on personal time. It speaks for nobody but itself, and it should not be read as the position of any organisation whatsoever.

The comic is satire. Patch is not a real person, the workplace he inhabits is not a real workplace, and his colleagues are not based on real individuals. Any resemblance to a specific person, team, employer or incident is coincidental — the situations are drawn from publicly posted discussions about problems common across the industry, and each strip links to what inspired it. If a strip feels like it is about your workplace, that is because it is about everyone's.

No advice, no engagement

Reading this site creates no professional relationship of any kind. We do not know your environment, your threat model, your obligations or your risk tolerance, and nothing published here is tailored to them. Decisions about your systems are yours, and should be made with people who know your situation.

Accuracy, and the limits of it

Material on the Radar is selected by software andis not reviewed by a person before it appears. It is wrong some of the time. Classifications, urgency markers and the "active exploitation" pin are automated judgments, not findings, and must not be treated as verified.

Evidence grades on ramblings are the considered opinion of a named person at the time of writing. They are an editorial judgment about the strength of available evidence — not a certification, not an audit, and not a guarantee. Evidence changes; grades change with it, and corrections are logged.

Information here may be incomplete, out of date, or superseded by the time you read it. Always go to the primary source, which is why every item links to one.

Third-party content

Links lead to material published by others. We do not control it, did not write it, and are not responsible for its accuracy or availability. A link is not an endorsement of the publisher, the vendor, or any product mentioned. Quoted or excerpted material remains the property of its authors.

We are not affiliated with, sponsored by, or compensated by any vendor, publication or research organisation whose work appears here.

Vulnerability and exploitation data

CVE identifiers, severity scores and publication dates come from the NIST National Vulnerability Database. Known-exploited status comes from CISA's Known Exploited Vulnerabilities catalogue. Both are reproduced as published and may lag real-world events. Neither CISA nor NIST is affiliated with this site or endorses it.

No warranty, no liability

This site is provided as is, without warranty of any kind, express or implied. To the fullest extent permitted by law, we accept no liability for any loss or damage arising from use of, or reliance on, anything published here.

Privacy

We set no cookies, run no analytics, and collect no personal information. There is no account to create and no mailing list. The site is served as static files; our hosting provider may keep standard server logs, which we do not use.

Corrections

If something here is wrong we want to know, and we will fix it with a dated note in the corrections log rather than quietly editing it away.

These terms may change. The current version is always the one on this page.