A rumor is an unverified claim that circulates before evidence is available. In cyber security, rumors often spread faster than facts because threat names, big brands, and urgent language make people react quickly. A rumor may describe a supposed breach, malware campaign, patch, or government order, but until it is backed by logs, samples, vendor advisories, or other reliable data, it remains speculation.
Rumors matter because attackers can weaponize them. They may use false alerts to trigger panic, distract defenders, or push users into opening links and sharing credentials. Defenders also have to watch for internal rumor chains that distort incident response. The safest practice is source discipline: check primary evidence, compare multiple trusted sources, and separate confirmation from assumption before taking action.