CERT-EU

https://cert.europa.eu/publications/security-advisories

Computer Emergency Response Team for EU institutions. URL CORRECTED 2026-05-08: /publications root is a navigation page only, sub-agents repeatedly returned a STUB. Drill into /publications/security-advisories/ (per-advisory entries with IDs like 2026-006) and /publications/threat-intelligence/ (monthly Cyber Briefs, e.g. cb26-05). Cite the per-advisory URL https://cert.europa.eu/publications/security-advisories/{YYYY-NNN}/ rather than the index. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → api: python3 tools/fetch_source.py cert-eu recent 5 (then webfetch per-advisory URL https://cert.europa.eu/publications/security-advisories/{YYYY-NNN}/ for body). AVOID: Do not cite /publications root; it is a navigation page. Use the per-advisory /security-advisories/{YYYY-NNN}/ URL.. | 2026-07-05 admiralty audit: A (primary-authority), EU governmental CERT publishing its own advisory series; live, api fetch clean. Status stays active. | 2026-08-23 audit: use the structured subcommand `python3 tools/fetch_source.py cert-eu recent N`, it returned 10 dated full-text advisories back to Jan 2026. The direct-URL bridge on /publications/security-advisories is the DEAD rung (JS-rendered listing, empty <main>). Also a content-type point that explains the long zero-contribution streak: CERT-EU's advisory series is exclusively vendor-vulnerability bulletins, so the incidents/regulator sweep will structurally never credit this source; it belongs to the vulnerability sweep.