v8: Cyber & Infrastructure Signals — A Fifth Dimension for Global Risk
WakeUpNeo.ai adds a dedicated cyber and infrastructure security signal — drawing from CISA Cybersecurity Alerts, CISA ICS Advisories, Krebs on Security, and The Record. The new cyber score is the mean of the top-5 scored cyber articles and carries 15% weight in the final blend. The scoring equation is now: 35% geo + 20% health + 20% market + 10% space + 15% cyber.
Four versions of WakeUpNeo.ai have tracked geopolitical news. Three have tracked health and outbreak intelligence. Since v6, space weather has contributed a physics-based stress signal. But one dimension of civilisation-level risk has been absent from the meter: the cyber and critical infrastructure threat landscape. Nation-state cyberattacks, ransomware against hospital networks, and attacks on industrial control systems — SCADA, water treatment, power grids — are now routine features of modern geopolitical competition. v8 adds a dedicated fifth signal to capture them.
Four new sources
| Source | Veracity | Poll interval | Coverage focus |
|---|---|---|---|
| CISA Cybersecurity Alerts | 0.95 | 30 min | Official US federal advisories — actively exploited vulnerabilities, critical infrastructure threats. The most authoritative public signal for US cyber emergencies. |
| CISA ICS Advisories | 0.95 | 60 min | Industrial Control Systems-specific advisories from CISA. Covers SCADA, operational technology, water systems, energy grid — the attack surface for physical-world disruption. |
| Krebs on Security | 0.88 | 15 min | Brian Krebs's investigative outlet. The breaking-news standard for major breaches, nation-state campaigns, and supply-chain attacks. Articles are scored for urgency and geopolitical scope. |
| The Record (Recorded Future News) | 0.85 | 15 min | Fast-breaking cyber threat intelligence from Recorded Future. Covers APT activity, ransomware incidents, internet shutdowns, and government-attributed attacks globally. |
The cyber scoring pool
Cyber articles are scored using the same four-factor composite as geo and health articles — urgency (40%), sentiment (30%), veracity (20%), recency (10%) — with the v8 urgency lexicon expanded to include cyber-specific terms: ransomware, zero-day, critical infrastructure, power grid, water treatment, nation-state, APT, SCADA, ICS, data breach, internet shutdown, and several others. The cyber score is the mean of the top-5 scored cyber articles in the 72-hour window. The tight pool (top-5 versus top-100 for geo) ensures only genuinely significant events move the needle — routine patch advisories and low-severity CVE disclosures will not register.
New blend — v8
score = 0.35 × GeoSignal + 0.20 × HealthSignal + 0.20 × MarketStress + 0.10 × SpaceWeather + 0.15 × CyberSignal
The geo weight drops from 40% to 35% and market from 25% to 20%. Space weather drops from 15% to 10%. The 10 percentage points freed up are allocated to the new cyber signal (15%). As with all signals, missing data is handled gracefully — if the cyber feeds are unavailable, the cyber weight is redistributed proportionally across the remaining signals so the final score always sums to 1.
| Signal | v7 weight | v8 weight | Pool |
|---|---|---|---|
| Geopolitical News | 40% | 35% | Top 100 geo articles |
| Health / Outbreak | 20% | 20% | Top 10 health articles |
| Market Stress | 25% | 20% | 4 financial indicators (VIX, Gold, Treasury, WTI) |
| Space Weather | 15% | 10% | NOAA Kp + GOES X-ray flux |
| Cyber / Infrastructure | — | 15% | Top 5 cyber articles (new) |
Why these four sources
The selection criteria were identical to the geo source framework: free RSS, substantive article content (not titles only), authoritative editorial standards, and coverage of a meaningfully distinct threat domain. Several other candidates were evaluated:
- Wired Security — strong coverage but paywalled; RSS items are teasers only.
- Dark Reading — titles-only RSS; no description text for AI scoring.
- Threatpost — defunct since 2023.
- Schneier on Security (Bruce Schneier) — considered as a fifth source; excellent analysis but lower publication frequency. May be added in a future release.
- BleepingComputer — high-quality breaking cyber news with full RSS descriptions. A strong candidate for v8.1 if coverage breadth needs expanding.