Last updated: 25 October 2026
These terms apply to anyone using cyber-threat.net. They are written to be read, and we have tried to keep them short. By using the site you agree to them. If you don’t, please don’t use the site.
1. Who we are
Cyber-Threat.net is an independent publication based in the United Kingdom. You can reach us through our contact page. In these terms, “we”, “us” and “our” mean Cyber-Threat.net and the people who publish it.
How we handle personal data is covered separately in our privacy notice. Our journalism is written to our editorial standards and our independence policy.
2. Using the site
The site is free to read. You may read it, share links to it, follow it through our RSS feeds, and quote it as described in section 3.
You must not:
- try to gain unauthorised access to the site, its server or its accounts, or test its security without our written permission;
- interfere with the site’s operation, for example by overloading it, or by introducing malware or anything else harmful;
- copy the site, or large parts of it, by automated means in a way that puts load on the server or republishes our work in bulk (feed readers and search engines are fine);
- use the site for anything unlawful, or to harass anyone; or
- pass off our work as your own, or present yourself as connected with us when you are not.
If you think you have found a security weakness in the site itself, please tell us through the contact page rather than testing it further.
3. Copyright and quoting our work
Unless we say otherwise, the text, images and design of the site are © Cyber-Threat.net. Material we quote from others remains theirs.
Quoting. You are welcome to quote reasonable extracts from our articles, such as a paragraph or a key finding, as long as you name Cyber-Threat.net and link to the original article. Please don’t republish whole articles, or so much of one that the copy replaces the original, without asking first.
This permission is in addition to anything the law already allows, such as fair dealing for criticism, review, quotation or news reporting.
Hunt Lab queries and scripts. Detection queries, rules and scripts published in Hunt Lab are meant to be used. You may copy, adapt and run them in your own defensive work. Where the same item is published in our public repository (opens in a new tab), the licence in that repository applies: MIT for queries, scripts and documentation, and the Detection Rule License 1.1 for Sigma rules. The disclaimer in section 5 also applies.
Our name. You may use our name to refer to us and to credit us. Please don’t use it, or our logo, in a way that suggests we endorse you or your product.
4. What we provide, and what we don’t
We work hard to get things right, and we correct our mistakes openly (see our corrections page). But security information changes quickly, and we can’t promise that everything on the site is complete, current or free of error at the moment you read it.
The site is journalism and analysis. It is general information, not professional advice for your particular systems, and not legal advice. Before you act on anything you read here, check it against the primary sources we link to and against your own environment.
We may change, suspend or remove any part of the site at any time, and we can’t promise it will always be available or free of faults.
5. Threat-hunting content
Hunt Lab queries, detection rules, indicators of compromise (IOCs) and scripts are provided as-is, for defensive use on systems you own or are authorised to test.
- Test before production. Run anything you take from us in a test environment, and tune it against your own telemetry, before you rely on it for alerting or response. Queries marked as drafts or untested have not been run against live data.
- IOCs age quickly. IP addresses, domains and file hashes are reassigned, reused and abandoned. An indicator that was malicious last month may be harmless, or belong to someone else, today. Check an indicator’s date and source before you block on it or act on a match.
- Authorisation. Nothing on this site gives you permission to access, scan or test any system you do not own or have permission to test. Doing so may be an offence under the Computer Misuse Act 1990.
- No guarantee of detection. A query that finds nothing does not prove you are clean.
6. Our liability to you
Nothing in these terms excludes or limits our liability for:
- death or personal injury caused by our negligence;
- fraud or fraudulent misrepresentation; or
- anything else that, by law, cannot be excluded or limited.
If you use the site as a consumer (that is, for purposes outside your trade, business, craft or profession): the site is free and provided for private, non-commercial reading. We are not liable for business losses, such as loss of profit, revenue, business, data or opportunity. We are also not liable for loss or damage that was not reasonably foreseeable when you used the site. Nothing in these terms affects your legal rights as a consumer.
If you use the site for business purposes: to the extent the law allows, we exclude all implied conditions, warranties and terms. We are not liable to you, whether in contract, tort (including negligence) or otherwise, for any loss of profit, revenue, business, data, goodwill or opportunity, or for any indirect or consequential loss, arising from your use of, or reliance on, the site or anything on it. That includes Hunt Lab content deployed in your environment.
7. Links to other sites
We link to vendor advisories, government guidance, research and other sources so that you can check our work. We don’t control those sites and aren’t responsible for their content, availability or security. A link is not an endorsement. Take the usual care with links in security reporting: some of the sites we write about are, by their nature, hostile, and we will warn you where we know a page is hostile.
8. Things you send us
If you send us a tip, a correction or any other material, you confirm that you are entitled to send it. You also allow us to use it in our reporting, in line with our editorial standards. We will not name a source who has asked not to be named. Please don’t send us live exploit code, credentials, or other people’s personal data.
9. Changes to these terms
We may update these terms from time to time, for example to reflect changes to the site or the law. The date at the top shows when they last changed. The version in force when you use the site is the one that applies.
10. The law that applies
These terms are governed by the law of England and Wales. Disputes will be dealt with by the courts of England and Wales. If you are a consumer living in Scotland or Northern Ireland, you may also bring proceedings in your local courts.
If any part of these terms turns out to be unenforceable, the rest still applies.