Editorial Policy

This page explains how ROCKSTARmedia Infosec decides what to publish and how we keep it accurate.

Sourcing

Every news story is based on a named primary source: an official announcement, a company statement, or reporting by an established outlet. Each article links to its source, so you can check it yourself. We do not publish a story when we cannot read the full source, for example when only a headline or short teaser is available.

How we use AI tools

We use AI writing tools to help draft news articles from their sources and to add Malaysian context. Automated checks run before anything is published: the source must be long enough to support a full article, prices and currency conversions are checked, and every product link is matched to a real product listing. Articles that fail a check are not published. Guides, reviews and site features are written and reviewed by our editor.

Accuracy

We do not invent figures, quotes, prices or release dates. Malaysian prices come from official local announcements. When we convert a foreign price, we say that it is an estimate.

Independence

We do not accept payment for coverage, and manufacturers do not review or approve our articles before publication.

Security reporting

Before a security story is published, an automated check compares every CVE number, CVSS severity score and software version in the article with the original report. If any of them does not appear in the source, the article is held back. Severity labels on our pages come from the scores in the original report, not from our own judgement.

We do not publish exploit code, attack commands, malware samples or live malicious links. When a report lists indicators of compromise, we tell readers that they are published in the original report rather than reproducing them. Our advice on what to do is limited to the fixes and mitigations the vendor or the original report gives.

Our Known Exploited Vulnerabilities pages mirror the public CISA catalogue and link to each entry in the US National Vulnerability Database. The patch deadlines shown there apply to US federal agencies; we show them as a guide to urgency.

If you are affected by a cyber incident in Malaysia, report it to Cyber999 (MyCERT). For online scams, call the National Scam Response Centre on 997.

Sponsored content

News coverage is free and is never sold. Developers and publishers are welcome to send us news, but sending it does not guarantee coverage, and nobody outside our team reviews or approves an article before we publish it. Anything paid for is labelled "Sponsored" at the top of the page, and its links are marked as sponsored for search engines. We never sell review scores or present paid content as our own news.

What we do not cover

We do not publish gambling or casino promotions, and we do not accept paid placements disguised as news.

Corrections

If we get something wrong, we fix it. Email corrections@rockstarmedia.com.my with the article link and the correction. Significant corrections are noted in the article.

Responsibility

The editor, Jeremy Lee, is responsible for the content of this site.