About FISRO

The publication#

FISRO covers vulnerabilities, software supply chains, account compromise, fraud and failures of digital infrastructure. The material is written for developers, system administrators, security teams and readers who need to understand the technical record behind an incident.

Our publication library brings together current reporting and historical case studies. A case study keeps the conditions and evidence of its period distinct from present-day maintenance advice. A technical advisory identifies the relevant product, exposure conditions and source of the recommended action.

What the articles add#

A useful article should help a reader make a decision: identify the affected deployment, interpret a diagnostic result, assess connected authority or plan a recovery step. Original diagrams and comparison tables explain those decisions. They do not stand in for new laboratory results.

Sources are linked on each article. Where the evidence leaves a question open, the article identifies the particular limit rather than supplying an invented answer. Significant changes are recorded in the update log.

Original research#

Source-based analysis and an original investigation are different kinds of work. FISRO uses the investigation label for work supported by its own collected evidence and a published method. The current research programme starts with reproducible studies of public security and release records.

Reports and corrections#

Use Report a threat to submit relevant technical information, or the contact form to request a correction. Do not send passwords, stolen datasets or potentially illegal files. Get help lists external resources for situations requiring assistance.

Status#

FISRO stands for Foundation for Internet Security Research and Outreach. It is an independent initiative in formation and is not yet a registered legal entity. Registration details, funding and formal relationships are documented on the transparency page when applicable.