Jump to content

Wikipedia talk:WikiProject Computer security/Archive 5

Page contents not supported in other languages.
Archive 1←Archive 3Archive 4Archive 5

User status discussion

This is a separate post to discuss the merits of the User status list.

From what I understand, at least 10 active users qualify as an active WikiProject. There are almost 80 users listed, but with very little activity. If that threshold is not met within a reasonable time frame (say, by the end of 2024?), it might be time to either mark the project as inactive or transform it into a taskforce of WikiProject Computing.

Critical to my reasoning is that a change would make coordinating the few editors interested in CompSec easier, not more convoluted - if in your experience, these kinds of transitions tend to garble rather than help, I would appreciate recommendations on whether or not to continue with this process. I am thinking that a taskforce of Computing makes the most sense, but I also imagine that could just add extra administrative work in the long run if the taskforce ever grows back out into a full project.

Additionally, I'm not sure if I should do more to draw attention to the list. I put a short {{notice}} on the main page; I wouldn't want to spam users, but also understandably few participants are actively monitoring the talk page where the actual discussion is. Tule-hog (talk) 00:38, 11 September 2024 (UTC)

Your roll call is a bit unusual and so I wasn't immediately clear what was going on. I've trimmed participant lists on projects in the past but just based on observed inactivity on Wikipedia as a whole e.g. mark them inactive if they've done no editing in the past year.
I already see WP:COMPSEC as dependent in some form or WP:COMP. Whether it is standalone, a child project or a task group doesn't seem to be of much practical consequence.
It is difficult to gauge the vitality of a project or task group or whatever. I'm not sure what you hope to achieve by marking it inactive but I will oppose that because I am still active. It's fine if you want to mark it semi-active but, as with your roll call and project hierarchy proposal, I'm not sure what you hope to accomplish by changing designation. ~Kvng (talk) 19:40, 11 September 2024 (UTC)
From what I gathered on WP:TF, the only possible benefits to a taskforce conversion would be:
1. {{WikiProject Computer Security}} is made a parameter of WP:COMP's banner, which results in
2. Automatically merged article alerts in the main project, so more editors notified
However, given WP:COMPSEC's considerable work on 'political'/non-computing-centric articles that might be opposed by WP:COMP in the first place.
The only reasoning to mark inactive would be to centralize work into WP:COMP; on further thought the taskforce conversion is the only option that makes sense, if any at all.
I will strike the status list and trim the list based on activity (on Wikimedia as a whole) in the last 2 years if you/any other participants could confirm that is justified. Tule-hog (talk) 20:41, 11 September 2024 (UTC)
We already have |security= and |security-importance= on {{WikiProject Computing}}. At this point, security seems to be both a task force and a standalone project. You're welcome to clean this up if we have consensus on how to do so. I would support closing down the standalone project in favor of the task force because I can't justify having both and I think you're right, we'll have more participation on security topics as a task force.
WP:COMP must get alerts from {{WikiProject Computing}} articles marked with |security=yes. I'm not sure if WP:COMP gets alerts from {{WikiProject Computer Security}}.
2 years of Wikipedia inactivity is more generous than necessary IMO but I won't quibble about it. ~Kvng (talk) 15:50, 12 September 2024 (UTC)
It looks like we may have the same task force/standalone project duality with WP:COMPSCI and WP:SOFTWARE so we probably should discuss this at Wikipedia talk:WikiProject Computing before proceeding. ~Kvng (talk) 15:56, 12 September 2024 (UTC)
Most articles tagged with WP:CSEC are already tagged with WP:COMPSCI or WP:ELECTRONICS depending on the topic area, I don't really see the benefit of doing the switcharoo in the first place. Also, I concur with Kvng that I don't see the project as inactive, it is definitely lower in activity, but that's probably expected in this kind of a nicher topic area from time to time. Sohom (talk) 23:45, 15 September 2024 (UTC)
So, you joined this wikiproject on September 5th only to immediately request it being shut down? (Actually, you joined about 14 minutes AFTER asking it to be shut down; even more interesting.) Why don't you participate a bit first and try to fix this perceived inactivity, before deciding to recommend such huge changes?
Note: I'm not against making this a task-force, but I'm surprised it's always apparent newcomers proposing such things. --DanielPharos (talk) 19:13, 14 October 2024 (UTC)
Participation is not measured by duration since signing the list; see my contributions. This was an inquiry to the community on how best to centralize the work after observing relative inactivity for around 5 months, not an attempt to shutter any editor organization around CompSec. Tule-hog (talk) 19:55, 14 October 2024 (UTC)
If signing up to the project is not a measure of participation, then why do you treat the user list as a gauge for the activity of the project?
Anyway, I apologize if I'm coming across as abrasive. It just that I've seen proposals like this before (for example, Wikipedia talk:WikiProject Computer Security/Archive 4#WikiProject restructuring), and back then it was build on handwavy argumentation, providing no clear support for the alleged benefit(s). I'm just trying to vet out if that's the case now too. --DanielPharos (talk) 22:13, 15 October 2024 (UTC)
Not the sole measure.
You are not coming of abrasive - this is the 'house tone' from what I've seen. The only benefits I saw are listed above in a numbered list, I won't duplicate them to keep the thread easier to review.
Apologies for the delay in my reply, I ran a little test of my understanding of article alerts and forgot to give the update. Article alerts did not work the way I thought, which was my only motivation for this proposal. With this new understanding, I retract the proposal. [To further clarify, I strongly disagree with the previous proposal's (thank you for the link) reasoning towards combining talk pages with WP:COMP - I would go as far as arguing that there is value in a dedicated talk page for CSEC editors regardless of this WP; but that is besides my reply.]
In particular, I thought that article alerts did not propagate from WP:CSEC to WP:COMP. For example, I thought an article like RazorThreat without an explicit {{WikiProject Computing}} tag (but with {{WikiProject Computer Security}}) would only display for CSEC article alerts. (A check of the latter template should have demonstrated to me this was not true.) However, a test prod showed this was false, and article alerts propagate from this project to COMP. Tule-hog (talk) 16:51, 28 December 2024 (UTC)
@Tule-hog
Thank you for the update! Yeah, the inner workings of Wikipedia can be a bit of a mystery. :D --DanielPharos (talk) 15:47, 22 January 2025 (UTC)
Hi.
University & Acadamia drop out. I have been involved with the subjects above for a while. I am also active on Wikipedia and willing to support your on-going efforts here on Wikipedia. Let me know if I can help at all?
Xuid0 (talk) 00:43, 10 January 2025 (UTC)

Requested move 18 January 2025

The following is a closed discussion of a requested move. Please do not modify it. Subsequent comments should be made in a new section on the talk page. Editors desiring to contest the closing decision should consider a move review after discussing it on the closer's talk page. No further edits should be made to this discussion.

The result of the move request was: WikiProject moved. As 2A02:3030:1:1158:D7EB:87:158D:43E5 notes, the naming convention can seem strange; but it is the present standard. Arbitrarily0 (talk) 16:59, 25 January 2025 (UTC)


Wikipedia:WikiProject Computer Security → Wikipedia:WikiProject Computer security – To match all related WikiProjects & taskforces:

  1. WP:WikiProject Computer science
  2. WP:WikiProject Computing/Computer hardware task force
  3. WP:WikiProject Computing/Computer networking task force
  4. WP:WikiProject Computing/Early computers task force
  5. WP:WikiProject Software/Free and open-source software task force   ~ Tom.Reding (talk ⋅dgaf)  13:30, 18 January 2025 (UTC)
Support: Seems like an uncontroversial change to me D1551D3N7 (talk) 13:59, 18 January 2025 (UTC)
Oppose: this isn't how proper nouns work in English. Change 'WikiProject Computer science' to 'WikiProject Computer Science' instead. 2A02:3030:1:1158:D7EB:87:158D:43E5 (talk) 17:14, 18 January 2025 (UTC)
"Computer science" and "Computer security" are not proper nouns. D1551D3N7 (talk) 17:27, 18 January 2025 (UTC)
But WikiProject Whatever is. 2A02:3032:367:24F4:C42C:5AC9:FDC9:5674 (talk) 19:29, 18 January 2025 (UTC)
You're free to try to RM all 5 WikiProjects & taskforces above to match your personal preference, but that would be going against the established broader consensus, and clearly the path of greatest resistance. Note that WP:WikiProject Computer science already matches the highest transcluded WikiProjects {{WikiProject Military history}}, {{WikiProject Articles for creation}}}, {{WikiProject College football}}, {{WikiProject Women's sport}}.   ~ Tom.Reding (talk ⋅dgaf)  12:38, 19 January 2025 (UTC)
The discussion above is closed. Please do not modify it. Subsequent comments should be made on the appropriate discussion page. No further edits should be made to this discussion.

Move discussion of interest

Cyberwarfare by China is part of this WikiProject and there is a move discussion on that article that may be of interest to those here. - Amigao (talk) 23:50, 16 March 2025 (UTC)

When should CVEs warrant their own article?

I've been editing Wikipedia long enough to have noticed a distinct lack of CVE related articles until they are given a proper name, e.g. CVE-2014-0160, better known as HeartBleed. Would we need anything different from the standard WP:GNG? Could we try writing a WP:SNG? guninvalid (talk) 17:35, 26 March 2025 (UTC)

The internal compass that I typically use is that the vast majority of individual CVEs are not-notable unless they have spurred extensive coverage in non-technical/technical mainstream sources. (Think heartbleed, zenbleed etc) If you do want to write about vulnerabilities, find a few (i.e > 1) research papers about it and write about a exploit class instead of a singular exploit/CVE. Sohom (talk) 19:59, 26 March 2025 (UTC)

Request for feedback on Draft Article: Rob T Lee

Hi, I’m working on a draft article about Rob T. Lee, a cybersecurity expert specializing in digital forensics and incident response. I would greatly appreciate any feedback on how to improve the article, especially in terms of technical accuracy or notability. Here's the draft: Draft:Rob T. Lee. Thank you! BmwPersonaMedia (talk) 17:19, 27 March 2025 (UTC)

Request for help with Suricata (software)

Suricata (software) looks like it would never have passed WP:AfC or WP:AfD. It would be greatly appreciated if interested editors would help to improve the article. guninvalid (talk) 16:19, 8 April 2025 (UTC)

Dancho Danchev

Hi everyone,

I've started working on a draft for cybersecurity expert Dancho Danchev Draft:Dancho Danchev who is very well known in the cybersecurity field and is very respected in the field. I have also published all of his news media references and mentions here Draft talk:Dancho Danchev and I wanted to get some feedback on my current article and how I can improve and make it stick to Wikipedia guidelines and objective article creation practices and I believe that the article will fall in the Wikipedia:WikiProject Computer security category in Wikipedia. Ahsks873 (talk) 19:05, 26 June 2025 (UTC)

Request for feedback on draft about 2FA bypass

Hi everyone,

I’ve been working on a draft article about Draft:2FABypass (2)Two Factor Authentication Bypass, which covers a tool and technique used to bypass two-factor authentication in certain contexts. I believe it falls within the scope of this WikiProject and could be of interest to editors here.

The draft has been submitted for review, but I’d really appreciate any feedback or suggestions from folks familiar with computer security topics. If anyone has time to take a look or offer guidance, I’d be grateful!

Thanks! Letscontributes (talk) 16:47, 14 August 2025 (UTC)

Interest in writing an essay on vulnerability notability

I'm interested in writing a WP:ESSAY on notability of vulnerabilities, particularly CVEs, but I've never done this before so I don't know the procedure. Anyone interested in helping? guninvalid (talk) 21:33, 22 September 2025 (UTC)

I've gone ahead and written User:guninvalid/Notability of vulnerabilities. I'm interested in seeing if this could be looked at and elevated to a proper essay. guninvalid (talk) 22:26, 22 September 2025 (UTC)

Request for feedback: Draft article on Todyl, Inc. (cybersecurity company)

Hi everyone. I’ve been working on a draft article about Todyl, Inc., a U.S.-based cybersecurity and networking company. The draft currently includes independent sourcing from TechTarget, Built In Colorado, CRN, SiliconANGLE, and ChannelPro. Before I resubmit through AfC, I could use feedback on whether the current sourcing meets notability standards (WP:ORGDEPTH), or if additional secondary features are still needed.

Here’s the draft link: Draft:Todyl

Thank you for taking a look! Absent.Editor (talk) 18:47, 26 October 2025 (UTC)

@Absent.Editor, thank you for contributing to Wikipedia! I've gone ahead and moved your subject to the main WikiProject instead. guninvalid (talk) 20:32, 26 October 2025 (UTC)

Discussion about WikiProject banner templates

For WikiProjects that participate in rating articles, the banners for talk pages usually say something like:

There is a proposal to change the default wording on the banners to say "priority" instead of "importance". This could affect the template for your group. Please join the discussion at Wikipedia talk:WikiProject Council#Proposal to update wording on WikiProject banners. Stefen 𝕋ower Huddle • Handiwerk 19:40, 6 December 2025 (UTC) (on behalf of the WikiProject Council)

Good article reassessment for Ransomware

Ransomware has been nominated for a good article reassessment. If you are interested in the discussion, please participate by adding your comments to the reassessment page. If concerns are not addressed during the review period, the good article status may be removed from the article. Z1720 (talk) 02:54, 15 January 2026 (UTC)

Organisation-based access control

Please add reliable sources. Bearian (talk) 09:40, 9 February 2026 (UTC)

Consistently high pageviews for Neatsville, Kentucky.

Wikipedia in the past has seen higher-than-expected pageviews for 1989 Tiananmen Square protests and massacre , presumably from bots run for political reasons. Google Chrome is another, but may just be caused by people using the wrong search bar. One that stands out is Neatsville, Kentucky , a small town with nothing notable. Here it is at number 31 last year: https://pageviews.wmcloud.org/topviews/?project=en.wikipedia.org&platform=all-access&date=last-year&excludes=. And it was at 23 yesterday. https://pageviews.wmcloud.org/topviews/?project=en.wikipedia.org&platform=all-access&date=2026-02-20&excludes= Any theories on what's going on, possibly pinging by a malicious bot? We've been speculating at Talk:Neatsville,_Kentucky and I'd really like to see an expert weight in. Thank you, Yourecoveredinbees (talk) 02:27, 22 February 2026 (UTC)

WP:VPWMF or WP:VPT might be a good place to get a definitive answer. For what it's worth, these kinds of spikes are often not malicious, but rather just the case of someone hot linking the page or using it as a default search time while testing software. Sohom (talk) 04:26, 22 February 2026 (UTC)

COI edit request relevant to this project

Just notifying members of this project that there is a Conflict of Interest edit request relevant to this WikiProject at the Jscrambler article. DrThneed (talk) 21:38, 3 March 2026 (UTC)

The sources provided from this user even when noting conflict of interest are of low quality and questionable independence.
The sources are similar to the ones already on the page. I suggest for deletion. This has been a problem in the past for the article already. W00zles (talk) 23:08, 3 March 2026 (UTC)
Thank you - I declined the request per your comment, but if you have further comments for the requester feel free to add them to the talk page. DrThneed (talk) 03:03, 11 March 2026 (UTC)

COI edit request relevant to this project: Confidential computing

Just notifying members of this project that there is a Conflict of Interest edit request relevant to this WikiProject at the Confidential computing article. DrThneed (talk) 03:06, 11 March 2026 (UTC)

Requested move at Talk:Cyberwarfare by Russia#Requested move 27 March 2026

There is a requested move discussion at Talk:Cyberwarfare by Russia#Requested move 27 March 2026 that may be of interest to members of this WikiProject. Qwerty123M (talk) 01:49, 28 March 2026 (UTC)

June 2026 GAN Backlog Drive

Good article nominations | June 2026 Backlog Drive
June 2026 Backlog Drive:

Do you want to become more experienced in the GA process?

  • On 1 June, a one-month backlog drive for good article nominations will begin.
  • Barnstars will be awarded based on the number of articles reviewed.
  • Mentors are available, and new reviewers (<6 reviews) get bonus points!

Interested in taking part? You can sign up here.

Other ways to participate:
You're receiving this message because you have participated in a good article review this year or participated in the previous backlog drive.

MediaWiki message delivery (talk) 21:59, 25 May 2026 (UTC)

Requested move at Talk:Trojan horse (computing)#Requested move 30 May 2026

There is a requested move discussion at Talk:Trojan horse (computing)#Requested move 30 May 2026 that may be of interest to members of this WikiProject. 🦅White-tailed eagleTalk to the eagleStalking eagle 01:18, 30 May 2026 (UTC)

Rework of project page

I restructured the project page at Wikipedia:WikiProject Computer security to feature specific todo items, clarify scope, and hide some outdated material. To @DanielPharos or any other members who might still have an eye on things, I'm interested in thoughts, suggestions, and objections. Dreamyshade (talk) 21:55, 14 June 2026 (UTC)

Some articles that need specific work

A few suggestions:

  • The article at hacker has an awkward relationship with security hacker and needs a rewrite - see discussion at Talk:Hacker#Structure
  • Computer security gets a lot of views but is not in good shape as a whole; the United States section is outdated
  • Social engineering (security) - "Countermeasures" section needs expansion
  • Login needs citations and is very short, which provides a good opportunity to integrate material about authentication and authorization, MFA, passkeys, cookies, and related topics in a plain language way
  • Password manager needs material about benefits to balance out the emphasis on vulnerabilities; tagged as needing citations since 2013
  • Onion routing - tagged as outdated since 2017
  • Cryptographic nonce - tagged as needing citations since 2013
  • Keychain (software) - also tagged as needing citations since 2013
  • Bytecode - tagged as needing citations since 2009
  • Pop-up ad - tagged as needing citations since 2008

Dreamyshade (talk) 22:09, 14 June 2026 (UTC)

I would add that the "hacker has an awkward relationship with security hacker" should probably also include Black hat (computer security), and possibly even Threat actor. I'd also be inclinded to remove bytecode from the security project (and indeed, pop-up ad) Joe (talk) 12:28, 15 June 2026 (UTC)
Agree that those hacker-related articles need sorting out as a whole, following the guidelines at Wikipedia:Summary style.
Bytecode and pop-up ad aren't tagged to this WikiProject, but I ran into them while assessing security-related articles. Pop-up ad would be helpful to improve because it's related to adware, scareware, and malvertising (another article that needs work), including technical support scams and ransomware.
Another open task: cybersecurity engineering should be merged into security engineering (see Wikipedia:Articles for deletion/Cybersecurity engineering). Dreamyshade (talk) 16:20, 17 June 2026 (UTC)
I took a quick swing at moving some of the content for that merge. It should be a bit easier now. Worth noting that we should also merge in Secure by design (which I've just PROD'd) and maybe Secure coding while we are here? Joe (talk) 08:48, 18 June 2026 (UTC)
Thanks for starting that merge! I believe secure by design could be a pretty interesting and robust article because of its specific intersection with US and UK government initiatives, especially CISA. I'll write a brief note on the talk page there. Secure coding could also be a good and helpful article if cleaned up, although the scope of that article vs. defensive programming should be clarified. Dreamyshade (talk) 16:24, 18 June 2026 (UTC)
Curious if you have opinions on how to handle psychology in cybersecurity. The article, as it stands, is WP:OR/WP:SYNTH and fails verification (see Talk:Psychology in cybersecurity). Currently the only article that links there is cyberpsychology. The topic is a plausible article subject (I provided a list of sources on the talk page), but it needs WP:TNT. Options include WP:STUBBIFY or nominate to merge with another article. It's related to usable security, engineering psychology, and social engineering, but none of them seem like a clear merge target. (Courtesy ping to @Kaolay who wrote this article.) Dreamyshade (talk) 19:47, 18 June 2026 (UTC)
I am cautious about having on-wiki opinions on that one to be honest. Like, yeah, the whole area is *woefully* underserved on Wikipedia, but I'd be citing people I have to sit next to at meetings... Joe (talk) 20:40, 18 June 2026 (UTC)
BTW, I note from https://projo.toolforge.org/jobs/ea29f?min_pageviews=4000&names_only=1&max_quality=.5&cleanup_only=1&sort=pageviews&dir=desc, that Hacker really is our biggest problem. Do we think we have enough energy to a) open up a merge conversation with Security hacker and b) agree a set of, like, five really serious sources that are high-quality, Post-2020 and that involved editors all have access to, so that those sources can be the backbone of the resulting article? Joe (talk) 20:44, 18 June 2026 (UTC)
That's funny about psychology in cybersecurity. This field is certainly a small world sometimes.
Hacker is a really challenging article. I'm up for helping but don't yet have a vision of what it could be, and I'd want to have a clear goal before proposing a merge. Could be helpful to start a rewrite in draftspace, at least an outline? Have you looked at the old versions for inspiration? This version from 2023 is interesting to me. Dreamyshade (talk) 21:00, 18 June 2026 (UTC)
I think we are in the same place. I think I need a solid set of sources to come to a vision. Maybe we come back to it after clearing up some of the other bits. We've certainly got a lot to do! Joe (talk) 21:10, 18 June 2026 (UTC)

Some potential tasks that intersect with computer science

Dreamyshade (talk) 20:46, 19 June 2026 (UTC)

Vital articles

I noticed there's a list of vital computer security articles (40 articles), and I linked to it from our scope statement. Interestingly, when I use PetScan to make a list of articles at the intersection of Category:All Computer security articles and Category:All Wikipedia vital articles, there are 71 results, since there are security-related articles within other lists of vital articles. I ran that list through Projo and found a couple nice opportunities to improve vital articles: Patch (computing) and Electronic lock both have minimal citations. Dreamyshade (talk) 07:31, 21 June 2026 (UTC)

COI edit request at Prompt injection

There is a narrow COI edit request at Talk:Prompt injection about attribution wording in the History section; uninvolved review would be appreciated. VarnishDelta742 (talk) 15:05, 26 June 2026 (UTC)

Cybersecurity of Wikipedia

Requesting feedback on this draft essay (User:Superb Owl/Security) on the state of cybersecurity across Wikimedia projects Superb Owl (talk) 16:41, 26 June 2026 (UTC)

Interesting! I'd suggest asking the Product Safety and Integrity team for input (on their talk page or similar); I wonder if they already have an internal outline that they could share some version of. Dreamyshade (talk) 17:27, 26 June 2026 (UTC)
Done! Superb Owl (talk) 18:47, 26 June 2026 (UTC)

Do we have anyone with a particular interest in the ISO27000 standards?

The ISO/IEC 27000 family and related articles need a lot of work (in the first place, I think most of the articles aren't even tagged for this project). I'm putting it on my list but I'd welcome anyone with an interest in the topic to get in touch Joe (talk) 21:04, 18 June 2026 (UTC)

I just learned that there's a substantial amount of academic research about implementation and efficacy of the ISO 27000 family: Google Scholar search. I added material from this review article to ISO/IEC 27001. I'm now convinced that Wikipedia editors could do a good thing for the whole industry by incorporating academic research into these articles, so that they aren't just recaps of what ISO says about its own standards.
Also going to merge ISO/IEC 27001 Lead Implementer and ISO/IEC 27001 Lead Auditor into ISO/IEC 27001. Dreamyshade (talk) 00:18, 29 June 2026 (UTC)

What to do and not to do

If you people want to improve this project there are 4 things to do:

1. Delete the junk, and there is plenty of it. You have made a good start above.

2. Find the key terms and concepts missing from the articles. Multiple ways to do so.

3. Find reasonable RS definitions.

4. Be modest. Know that this is a complicated project.

I leave item 1 alone. For key terms various web searches may be performed and what they have in common may be a key term. Item 3 may appear as a challenge, but not impossible at all. The very best site for this topic is IBM which has pretty good tutorial type articles. So search for computer security at the IBM site and you will get key terms and definitions.

What NOT to do is obvious, avoid AI suggestions. I typed computer security into Grokipedia and it has text such as "The scope of computer security primarily focuses on endpoint devices such as desktops, laptops, servers, and virtual machines, distinguishing it from broader cybersecurity, which extends to networked environments and internet-scale threats" which is, of course, pure nonsense. The source listed for it was a hopeless site. And for Unix Security it has many pages which are copies of old, outdated Unix manuals. Nonsense would be too kind a word for Grokipedia.

Anyway, I do not have much time, so will remain silent for a while. Yesterday, all my dreams... (talk) 12:07, 6 July 2026 (UTC)

Regulatory requirements sections

This table catalogs 66 articles where @JGellatly added a "Regulatory requirements" section or similar, mostly focused on the HIPAA Security Rule and related US health industry security compliance requirements (which are relevant to his declared COI, although the content does not directly mention or link to his company). The table has 66 articles, including 59 with the content present and 7 where it was reverted.

Like I said at Wikipedia:AI noticeboard#User:Jgellatly (which has some context), I think that some coverage of regulations is reasonable in several of these articles, but the specific additions have issues with original research (cited to primary sources that don't necessarily back up the specific claims of relevance to the subject) and balance (US-centric, and overly specific to HIPAA in most cases). Like, zero trust architecture is tangential to HIPAA. Wikipedia:Summary style means that we don't need to cover the same level of detail about the HIPAA Security Rule in every article that is possibly related. We especially don't need to cover a HIPAA Security Rule notice of proposed rulemaking in so many articles - it's not even a final rule.

For example, even if just talking about healthcare data security regulations, GDPR is equally as important as HIPAA. If trying to briefly cover relevant cyber-security regulations and information security standards in general on computer security articles, I'd say top-tier is GDPR, HIPAA/HITECH, NIST Cybersecurity Framework, and ISO 27001. Second tier might be NIS2 (EU digital infrastructure), Digital Operational Resilience Act (EU financial), Cyber Resilience Act (EU), PCI DSS, and Protection of Personal Information Act, 2013 (South Africa).

Anyway, I'd encourage reviewing the following articles, updating them, and updating the table. Dreamyshade (talk) 05:59, 29 June 2026 (UTC)

User is @User:Jgellatly (lower case G)--correcting so the courtesy ping will work.
I support a cleanup here, and suspect that most of these sections should be removed or heavily revised. I don't have the topic expertise to be much help but would be happy to provide an opinion on LLM use in a given article.
M kuhner (talk) 06:28, 29 June 2026 (UTC)
I understand that user is now blocked for socking thanks to excellent work by @Dreamyshade and others. Tbh - I don't think anyone needs to be a HIPAA expert - checking references for halluciations goes a long way... Joe (talk) 11:24, 29 June 2026 (UTC)
The term "topic expertise" is the catch in this project. It is a pretty complicated and very dynamic area. I have not seen a Wiki user who really understands the topic today. About 7 to 10 years ago I understood the general issues quite well. Now I would need to read for a year to catch up. Look at the computer faculty at Berkeley, Stanfotd and UCLA. They are "loaded" with security people, because it is easy to get tenure that way, unlike databases which are stable. So let us set modest goals as we proceed. Yesterday, all my dreams... (talk) 11:03, 6 July 2026 (UTC)
I would agree with that tier list. I've reviewed a few and added notes to the table. Easy to get distracted fixing other bits of the articles as well :D Joe (talk) 11:12, 29 June 2026 (UTC)
As best I can discover, the HIPAA tightening proposed 2024 is not finalized as of June 2026. Its inclusion I think therefore violates WP:DUE in just about every article where it appears except HIPAA itself. A single-country regulation that has not even been implemented is a very weak illustration of most of these concepts. (Looking at the one in Attack surface as an example. M kuhner (talk) 13:15, 29 June 2026 (UTC)
Support a WP:LLMPRV at this point. If anyone would like to salvage their contributions, they can do so, but it's probably best to clear out the slop first, and maybe look for the gold later. guninvalid (talk) 08:06, 30 June 2026 (UTC)
The more of these I see, the more artificial and inappropriate each one looks. I'm not sure that's entirely fair, but there it is.... Once in a while the first sentence is worth salvaging. Mostly I'm taking them out. M kuhner (talk) 03:16, 2 July 2026 (UTC)
Hi @User:Dreamyshade, I see you edited the problem section in Supply chain attack--are you satisfied with it? I am 99% out of patience and am generally just taking them out, but if you've checked the citations here, I'll leave it alone. M kuhner (talk) 18:59, 4 July 2026 (UTC)
@M kuhner Oh thanks for asking! I have not reviewed that one. I went through and fixed syntax problems (missing ref tags) in a lot of these, just so that the content would be readable for further review. Please go ahead as you see fit! Dreamyshade (talk) 21:19, 4 July 2026 (UTC)
My suggestion: zap them all, 99.9% nonsense. Yesterday, all my dreams... (talk) 10:50, 6 July 2026 (UTC)

Calling this done and collapsing the table! Big thanks to everyone who helped with this effort despite the dry subject matter. Dreamyshade (talk) 04:14, 11 July 2026 (UTC)

Woohoo! Great community effort. Also found a couple of articles that could really use some tender loving care (or possibly deletion). M kuhner (talk) 04:19, 11 July 2026 (UTC)
We sure do have a lot of those in this WikiProject. Please feel free to make a new thread about what you found, on the off chance that this might inspire somebody to deal with them. Dreamyshade (talk) 04:24, 11 July 2026 (UTC)

Miscellaneous positive updates

  • An article in scope just achieved Good Article status: Appin, an Indian cyber espionage company. Nice work @Brandon.
  • Several editors recently improved Jesse Tuttle, an article about a former hacker, which was previously in bad shape (especially for a BLP).

Dreamyshade (talk) 04:48, 11 July 2026 (UTC)

Also the work you guys have been doing cleaning up all the regularity requirements stuff is really impressive. Well done! Joe (talk) 09:56, 11 July 2026 (UTC)

Articles in scope that are tagged for AI cleanup

Based on this query, processed with Projo to rank in approximate order of pageviews over the past 60 days:

Tips: Wikipedia:WikiProject AI Cleanup/Guide. Dreamyshade (talk) 07:07, 14 July 2026 (UTC)

I took a swing at Internet security awareness. Joe (talk) 15:27, 15 July 2026 (UTC)

Requested move at Talk:OpenAI–HuggingFace incident § Requested move 16 September 2026

An editor has requested that OpenAI–HuggingFace incident be moved to 2026 OpenAI agent cyberattacks, which may be of interest to this WikiProject. You are invited to participate in the move discussion. TarnishedPathtalk 12:53, 23 September 2026 (UTC)
(Notification provided by Move+)

Unreferenced articles

For anyone interested in the August 2026 Unreferenced article backlog drive, a few articles in scope with zero references:

Dreamyshade (talk) 04:38, 31 July 2026 (UTC)

Handling duplicative articles

@Joereddington I support figuring out how to deal with the many poorly-sourced, vague, and duplicative articles in this topic area, but I support avoiding WP:BATHWATER through applying Wikipedia:Deletion policy#Alternatives to deletion. This includes: "If editing can address all relevant reasons for deletion, this should be done rather than deleting the page." and "If two pages are duplicates or otherwise redundant, one should be merged and redirected to the other, using the most common, or more general page name." I'll write notes on the talk pages for Information security awareness, Software security assurance, and Security kernel. Dreamyshade (talk) 16:11, 19 June 2026 (UTC)

I think I'm reading this as "Stop PRODing things" and that's fair enough - my thing is just that there are _so_ many articles that are content forks, bording on POV content forks and _so_ few editors... Certainly I'm happy to take more relaxed approach while we work on all the other things to do... Joe (talk) 05:07, 25 June 2026 (UTC)
Sorry! I find PROD really helpful for articles about obscure companies and products, but I do hesitate on it for terms and topics because the old content just disappears, and it creates broken incoming links unless somebody fixes them. I like to use WP:BLAR (blank-and-redirect) for articles that are too obscure or duplicative to be worth fixing, and that have minimal content worth merging. It's faster than PROD - doesn't require a waiting period or discussion - and it's easy for somebody to reverse in the future if they want to go back and rescue some content or build out the article. I also consider it fine to do a minimal-effort copy-and-paste merge of any potentially-worthwhile parts, without trying to integrate them very well into the target article, with an edit summary that provides credit. Somebody else can fix that up. Dreamyshade (talk) 05:25, 25 June 2026 (UTC)
Ran into the annoying security awareness cluster again and nominated for merge: Wikipedia:Articles for deletion/Information security awareness.
Also nominated this redundant article: Wikipedia:Articles for deletion/Automated penetration testing.
On the other hand, I found a draft for Sectigo that allowed me to split it out from Xcitium (both formerly known as divisions of Comodo), which was overdue! Dreamyshade (talk) 22:50, 1 August 2026 (UTC)