0.6.0

[found-cake]

Summary

Cyber Dashboard 0.6.0 expands Korean security news coverage, improves article analysis and severity scoring, and strengthens feed integrity, licensing, and responsible content-collection boundaries.

Changes

News sources and content collection

• Add DailySecu as an optional source, disabled by default
• Group BoanNews and DailySecu together as Korean news sources
• Use publisher-provided RSS data only for StepSecurity, Dark Reading, BoanNews, and DailySecu
• Do not request article pages from these RSS-only sources in the default build
• Continue loading supported full content from:
  • The Hacker News through HTTP
  • BleepingComputer through Chromium
  • Cybersecurity News through embedded feed content
• Centralize article selectors and Chromium routing in a shared per-source configuration
• Keep selector hints for RSS-only sources documented in code for custom builds
• Preserve publisher RSS descriptions separately from AI-generated summaries for reliable reanalysis

Custom builds may configure additional article selectors, but users should confirm and comply with each publisher's terms before enabling article-page collection.

Feed integrity and safety

• Adopt the cyber-news-feed v1.2.1 RSS schema
• Validate that each RSS document declares the requested source
• Limit upstream feed responses to 8 MiB
• Bound license document reads to 1 MiB
• Aggregate module- and package-scoped license documents

Article analysis and severity

• Extract explicitly stated leaked-data volume from articles
• Distinguish byte and bit units such as GB and Gb
• Normalize ranges, Unicode dashes, and common decimal and binary units
• Reject malformed or incomplete article-analysis responses instead of silently using zero values
• Include leaked-data volume in severity scoring:
  • 1 GB or more: Medium
  • 100 GB or more: High
  • 1 TB or more: Critical

Runtime and performance

• Upgrade the project to Go 1.27
• Benefit from Go 1.27 JSON and runtime improvements without adopting the experimental JSON v2 API

Documentation

• Clarify which sources provide article bodies and which use RSS data only
• Document leaked-data volume analysis and severity thresholds
• Document optional article-content collection requirements

Compatibility notes

• DailySecu remains disabled by default and must be enabled from Settings.
• StepSecurity, Dark Reading, BoanNews, and DailySecu article pages are not fetched by the default build.
• Existing articles are not automatically reanalyzed with leaked-data volume scoring.
• Existing RSS-only articles must be recollected before publisher descriptions are stored in the dedicated database field.
• Database schema updates are applied automatically at startup.