Terms of use

1. Who may use the site

You must be able to form a binding contract where you live. The site is a general-audience news publication. It is not directed at children under 16. If you use the site on behalf of an organization, you represent that you can bind that organization, and "you" includes it.

2. The service

We publish briefings, an archive, an RSS feed, and pages that explain who we are and how to reach us. We may add, change, or remove stories and features without notice. We do not promise that the site will be uninterrupted or error-free. Scheduled or emergency maintenance, a host failure, or a takedown required by law can take a page offline.

There is no user account. You do not buy a subscription through this site unless we say so in a separate offer that links to its own terms.

3. Not professional advice

Briefings are journalism and explanation. They are not incident-response advice, penetration testing, legal advice, financial advice, or a recommendation to buy or sell a security. A CVE number, a patch suggestion, or a description of a control is general information based on public sources. Your environment, contracts, and legal duties are yours. Before you act on a briefing in a production network, confirm it against the vendor advisory and your own change process. For a legal question, talk to a lawyer who represents you.

4. Intellectual property

The text, headlines, selection and arrangement of briefings, the ZeroDay Times name, the wordmark, and the original graphics on this site are owned by the operator or its licensors. They are protected by copyright, trademark, and other laws. All rights not expressly granted are reserved.

You may:

• Read the site in a browser and share ordinary links to public URLs.
• Quote a short excerpt for criticism, commentary, news reporting, teaching, or research, with credit and a link to the original briefing, to the extent fair use or a similar exception in your country allows.
• Use the RSS feed in a reader for personal or internal newsroom use.

You may not, without prior written permission:

• Copy a briefing wholesale, republish our archive, or frame the site to pass it off as yours.
• Remove copyright or attribution notices.
• Use the ZeroDay Times name or a confusingly similar name for your own security product, newsletter, or event.
• Train a public machine-learning model on our archive, or sell a dataset of our articles, except where a law says a contract cannot restrict that use.

If you want a broader license, including a translation or a classroom packet, email[email protected].

5. Copyright complaints

We respect copyright. If you believe material on the site infringes a copyright you own or control, email [email protected] with the subject line "Copyright notice." Include:

• Your name and a way to reach you, including an email address and a telephone number.
• A description of the copyrighted work you claim has been infringed.
• The URL of the material you want removed or changed.
• A statement that you have a good-faith belief the use is not authorized by the owner, the owner's agent, or the law.
• A statement, under penalty of perjury, that the information in the notice is accurate and that you are the owner or are authorized to act for the owner.
• Your physical or electronic signature.

We do not publish a street address. If a statute that applies to a specific notice requires a postal address for the agent, say so and we will provide one for that notice. We may remove or disable material while we review a complete notice, and we may notify the person who supplied it. If you sent a tip that we published, you are the person we will notify.

Submitting a false notice may have legal consequences. If you are not sure whether a use is an infringement, talk to a lawyer before you write to us.

6. Tips and other submissions

We welcome tips, corrections, and letters. Do not send exploit code, malware, credential dumps, or personal data taken from a victim. A useful tip names the issue, who is affected, and whether the party who can fix it has been told.

If you send us information you intend for publication, you grant ZeroDay Times a non-exclusive, worldwide, royalty-free license to use, edit, publish, and display that information in connection with the publication, including in headlines and later follow-ups. You keep ownership of what you created. You represent that you have the rights needed to grant this license and that the submission does not invade privacy or break a law by being sent.

We may ignore, edit, or decline any submission. Sending a tip is not an assignment, a freelance contract, or a promise of payment or anonymity. If you need anonymity, say so in the first message and do not include details you cannot afford to have connected to you. We will not intentionally burn a source who asked for confidentiality, and we also cannot promise that email is a perfect channel. For a sensitive tip, say that you want a different channel and we will tell you what we can offer.

Do not send us information you are not allowed to share, including trade secrets you have a duty to keep, classified material, or data covered by a confidentiality agreement. We would rather miss a story than receive a document you had no right to forward.

7. Acceptable use

You agree not to:

• Probe, scan, or test the vulnerability of this website, or breach its security, without prior written permission sent from us. A wish to write about security does not include permission to attack the publication.
• Interfere with the site, including by overloading it, bypassing access controls, or injecting code into pages a reader loads.
• Use the site to distribute malware or to publish someone else's personal data without a lawful basis.
• Misrepresent your affiliation with ZeroDay Times.
• Scrape the site in a way that degrades service for other readers. Ordinary browsing and the RSS feed are the supported ways to read.
• Use any automated means to create accounts or send bulk mail to the desk. There are no accounts. One human email is enough.

We may block traffic, remove material, or refer a matter to a host or to law enforcement when we believe these rules have been broken.

8. Third-party links and advertising

Briefings link to advisories, standards, and other publications. Those sites have their own terms and privacy practices. A link is not an endorsement, and we are not responsible for third-party content.

The site may show advertisements, including Google AdSense units labeled "Advertisement." An advertiser's products, claims, and privacy practices are the advertiser's. Your dealings with an advertiser are between you and that advertiser. Advertising does not buy changes to a briefing. How ad cookies work is described in theprivacy policy.

9. RSS and automated access

The RSS feed at /rss.xml is provided for readers. You may not present the feed as your own publication or strip attribution. We may change the feed's address or format. If we do, we will try to keep the old address working for a reasonable period.

10. Disclaimer of warranties

THE SITE AND ALL BRIEFINGS ARE PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT ALLOWED BY LAW, WE DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT A BRIEFING IS COMPLETE, CURRENT, OR FREE OF ERROR, OR THAT A PATCH MENTIONED IN A STORY IS THE RIGHT CHANGE FOR YOUR SYSTEMS.

Some jurisdictions do not allow the disclaimer of implied warranties. In those places, the disclaimers above apply only to the extent the law allows. You may have other statutory rights that these terms cannot remove.

11. Limitation of liability

TO THE MAXIMUM EXTENT ALLOWED BY LAW, THE OPERATOR OF ZERODAY TIMES AND ITS CONTRIBUTORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS, ARISING OUT OF OR RELATED TO YOUR USE OF THE SITE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY.

TO THE MAXIMUM EXTENT ALLOWED BY LAW, OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF THE SITE WILL NOT EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS (US $100) OR THE AMOUNT YOU PAID US TO USE THE SITE IN THE TWELVE MONTHS BEFORE THE CLAIM. THE SITE IS FREE, SO THAT AMOUNT WILL USUALLY BE US $100.

These limits do not apply to liability that a law says cannot be limited, including liability for fraud, or for death or personal injury caused by negligence where such a limit is prohibited. They also do not affect rights you have as a consumer that cannot be waived.

12. Indemnity

If you send us a submission, you will indemnify and hold the operator and its contributors harmless from claims, damages, losses, and reasonable legal fees arising out of that submission or out of your breach of these terms, except to the extent a court finds the claim was caused by our own willful misconduct. We will promptly tell you about a claim we expect you to cover and will not settle it in a way that admits your fault without your consent, which you will not unreasonably withhold.

13. Termination

You may stop using the site at any time. We may stop offering the site, or block access, if you materially break these terms or if we stop publishing. Sections that by their nature should survive — intellectual property, submissions you already sent, disclaimers, liability limits, indemnity, and governing law — survive.

14. Governing law and disputes

These terms are governed by the laws of the State of Delaware and the federal laws of the United States that apply, without regard to conflict-of-law rules. Subject to the consumer carve-out below, the state and federal courts located in Delaware have exclusive jurisdiction, and you consent to personal jurisdiction there.

If you are a consumer living outside the United States, you may also have the right to bring a claim in the courts of your country of residence, and to the protection of mandatory laws of that country. Nothing in these terms removes those mandatory rights.

Before filing a claim, you agree to email[email protected]with a short description and to give us 30 days to try to resolve it. This is a courtesy step, not a waiver of any right a statute says cannot be delayed. We are not required to use arbitration. Either of us may seek injunctive relief for misuse of intellectual property without waiting 30 days.

15. Export and sanctions

You may not use the site if you are barred from receiving U.S. services under applicable sanctions, or if you are located in a country subject to a comprehensive embargo, to the extent providing the site there would be unlawful. We do not intend the site as an export of controlled technical data. Briefings deliberately omit exploit procedures.

16. Changes to these terms

We may update these terms by posting a new version on this page and changing the date above. The new terms apply to your use after that date. If you keep using the site after the date, you are using it under the updated terms, except where a mandatory law requires a different form of notice. A change does not rewrite a license you already granted us for a submission, and it does not remove statutory rights.

17. Miscellaneous

These terms, together with the privacy policy, are the entire agreement between you and us about the site. They replace earlier website terms. If a court holds one provision unenforceable, the rest stay in effect. Our failure to enforce a provision is not a waiver. You may not assign these terms. We may assign them to a successor of the publication. There are no third-party beneficiaries, except that contributors are protected by the liability and indemnity sections. The headings are for convenience.

Questions about these terms:[email protected].