Swiss cybersecurity analysis in your inbox — threats, regulation, incidents. Unsubscribe anytime.
All Articles
62 articles
⌕
FeaturedRegulation9 July 202611 min read
ESRB Declares Frontier AI a Systemic Cyber Risk — ECB Orders Bank Action Plans by 31 October
The ESRB has classified frontier AI models as a systemic cyber risk to the EU financial system, and the ECB wants action plans by 31 October. The Swiss impact.
by Marco ScaritoRead article →
Threat Intel7 July 202610 min read
GitLost: How a GitHub AI Agent Was Tricked Into Leaking Private Repositories
Noma Labs' GitLost showed how a prompt injection in a public GitHub issue coerced GitHub's AI agent into exfiltrating private repository contents. What it means for Swiss engineering teams.
by Marco ScaritoRead article →
Analysis5 July 20269 min read
AI Code in Production: Swiss SDLC Risk Guide 2026
Half of engineering teams run AI-generated code in production while AI features fail pentests 2.7x more often. Swiss SDLC controls must adapt.
by Marco ScaritoRead article →
Analysis5 July 20269 min read
Financial Vendor Breaches Up 6.5x: Swiss Bank Risk 2026
Black Kite's 2026 report shows breaches among the top financial vendors rose from 6 to 39 in a year. What concentration risk means for Swiss banks.
by Marco ScaritoRead article →
Incident Report5 July 20269 min read
Payload Ransomware Hits Two Swiss SMEs in One Week: 2026
Payload ransomware claimed Swiss broker ENB and automation firm Qualiflex in one week, testing ISA reporting duties and Swiss SME resilience.
by Marco ScaritoRead article →
Analysis3 July 202610 min read
Claude Fable 5's 19-Day Ban: How a Jailbreak Report Triggered US Export Controls on Anthropic's Flagship Model
US export controls pulled Claude Fable 5 offline for 19 days. The verified timeline, the jailbreak behind it, and what it means for Swiss AI governance.
by Marco ScaritoRead article →
Threat Intel28 June 20268 min read
Chrome V8 Zero-Day CVE-2026-11645: Swiss Risk 2026
CVE-2026-11645, an actively exploited Chrome V8 zero-day on the CISA KEV list, turns any visited web page into a code-execution risk for Swiss endpoints.
by Marco ScaritoRead article →
Best Practices28 June 202610 min read
Miasma npm Attack: Swiss CI/CD Hardening Guide 2026
The Miasma npm worm published malware with valid SLSA provenance via stolen OIDC tokens. A CI/CD hardening baseline for Swiss dev teams.
by Marco ScaritoRead article →
Regulation28 June 20269 min read
NIS2 Incident Reporting Templates: Swiss EU Guide 2026
The NIS2 uniform incident-reporting templates set the format Swiss EU-market entities must adopt before the June 30 compliance audit.
by Marco ScaritoRead article →
Regulation21 June 20268 min read
NCSC Mandatory Cyber Reporting: Swiss ISA Enforcement 2026
Switzerland's ISA transitional period for mandatory cyber reporting ends mid-2026. Swiss operators must validate their NCSC 24-hour notification pipelines now.
by Marco ScaritoRead article →
Threat Intel21 June 20268 min read
RoguePlanet CVE-2026-47281: Swiss Endpoint Zero-Day 2026
CVE-2026-47281 (RoguePlanet, CVSS 9.6) exploits Microsoft Defender via VS Code integration to achieve SYSTEM-level escalation on any Windows endpoint.
by Marco ScaritoRead article →
Best Practices21 June 20268 min read
SharePoint CVE-2026-45659: Swiss On-Prem Patch Guide 2026
CVE-2026-45659 enables RCE on SharePoint Server 2016–SE via Site Member credentials, targeting Swiss financial on-prem deployments with compliance-driven patch debt.
by Marco ScaritoRead article →
Threat Intel17 June 20269 min read
SearchLeak CVE-2026-42824: M365 Copilot One-Click Data Theft
Varonis disclosed SearchLeak (CVE-2026-42824): a one-click attack chain that turned M365 Copilot into a data exfiltration tool targeting emails and files.
by Marco ScaritoRead article →
Threat Intel15 June 20268 min read
Citrix NetScaler CVE-2026-3055: Swiss Perimeter Alert 2026
CVE-2026-3055 is exploited at scale against Citrix NetScaler — the dominant SSL-VPN and load balancer in Swiss banking and enterprise perimeters.
by Marco ScaritoRead article →
Best Practices15 June 20269 min read
Microsoft Patch Tuesday June 2026: Swiss IT Priority Guide
Microsoft June 2026 Patch Tuesday: 200 CVEs and 6 zero-days including Windows Kernel RCE. Patch prioritisation guide for Swiss enterprise IT teams.
by Marco ScaritoRead article →
Regulation15 June 202610 min read
Swiss KRITIS-G and EU NIS2 Revision: CISO Guide 2026
Switzerland's KRITIS-G and the EU NIS2 revision advance in parallel. Swiss operators must navigate both legislative tracks to avoid compliance gaps by 2027.
by Marco ScaritoRead article →
Incident Report11 June 202610 min read
AI Agent Hijacking: Instagram VIP Takeover and EU Risk 2026
Meta's Instagram AI support agent was manipulated via prompt injection to bypass MFA and hand attackers control of verified VIP accounts.
by Marco ScaritoRead article →
Incident Report7 June 20269 min read
Exchange OWA CVE-2026-42897: Swiss On-Prem Alert 2026
CVE-2026-42897 exploits Exchange OWA via crafted email with no permanent patch available. Swiss on-premises deployments face active exploitation risk.
by Marco ScaritoRead article →
Best Practices7 June 202610 min read
CVE-2026-41089 Netlogon RCE: Swiss AD Patching Guide 2026
CVE-2026-41089 is an unauthenticated Netlogon RCE under active exploitation. Swiss AD environments must patch all domain controllers simultaneously.
by Marco ScaritoRead article →
Analysis7 June 20269 min read
WEF Cybersecurity Outlook 2026: Lessons for Swiss CISOs
WEF 2026 report: AI drives 87% of cyber risk perceptions and identity is the dominant attack path. Priorities for Swiss security leaders.
by Marco ScaritoRead article →
Regulation31 May 20268 min read
DORA First TLPT Cycle: Swiss Financial Entity Guide 2026
The first mandatory TLPT cycles under DORA begin in 2026. Swiss banks and insurers with EU subsidiaries must prepare for TIBER-EU-aligned testing now.
by Marco ScaritoRead article →
Analysis31 May 20269 min read
Sovereign Cloud: How EU Regulations Reshape Swiss Cloud 2026
DORA, NIS2, and the EU AI Act are creating hard data residency constraints for Swiss FinTech and HealthTech firms dependent on US hyperscalers.
by Marco ScaritoRead article →
Incident Report31 May 20267 min read
Unimed Breach: Swiss Healthcare Third-Party Risk 2026
The Unimed third-party billing breach at German university hospitals exposes 12,600 patients. Swiss hospitals face identical data concentration risk.
by Marco ScaritoRead article →
Threat Intel24 May 20268 min read
Dirty Frag Zero-Day Hits Swiss Linux Infrastructure 2026
CVE-2026-43500 grants root on all major Linux distributions. Swiss banks, cloud workloads, and VPN gateways running IPsec are immediately exposed.
by Marco ScaritoRead article →
Best Practices24 May 20268 min read
NIS2 Enforcement 2026: Swiss EU Subsidiary Guide
First NIS2 supervisory audits are underway in 22 EU member states. Swiss holding companies with EU subsidiaries cannot rely on FINMA compliance alone.
by Marco ScaritoRead article →
Analysis24 May 20269 min read
Security ROI Metrics for Swiss Board Reporting 2026
A practical framework for translating security posture into financial risk metrics aligned with FINMA Circular 2023/1 board governance expectations.
by Marco ScaritoRead article →
Incident Report17 May 20268 min read
Akira Ransomware Hits Swiss Medical Network 3R Again 2026
Akira ransomware struck Groupe 3R's 20 imaging centres in April 2026 — the second attack in 12 months on Swiss healthcare infrastructure.
by Marco ScaritoRead article →
Best Practices17 May 20269 min read
MCP Agent Security Framework for Swiss Enterprises 2026
Swiss enterprises are deploying MCP agents without security review. This framework covers prompt injection, tool abuse, and Entra ID credential theft.
by Marco ScaritoRead article →
Best Practices17 May 20268 min read
May 2026 Patch Tuesday: Swiss Enterprise Priority Guide
CVE-2026-41103 (CVSS 9.1) tops May 2026 Patch Tuesday's 118 CVEs. Swiss teams using Atlassian tools with Entra ID must patch immediately.
by Marco ScaritoRead article →
Threat Intel10 May 202610 min read
APT28 Deploys PRISMEX Against EU Defence Supply Chains: Anatomy of an Eleven-Day Zero-Day Window
Russia-linked APT28 exploited CVE-2026-21513 for eleven days before patching, deploying PRISMEX across NATO logistics networks. Swiss dual-use exporters face direct exposure.
by Marco ScaritoRead article →
Incident Report10 May 20268 min read
Canvas LMS Breach: Swiss Universities Data at Risk 2026
ShinyHunters stole data from 15,000 Canvas LMS institutions. Swiss universities face nDSG breach notifications and student data exposure risks.
by Marco ScaritoRead article →
Best Practices10 May 202611 min read
Mapping DORA and NIS2 to NIST CSF 2.0 and CIS Controls: A Compliance Efficiency Roadmap for Swiss Financial Institutions
Swiss financial institutions juggling DORA, NIS2 and FINMA obligations can cut duplication by anchoring to NIST CSF 2.0 and CIS Controls v8. Here is how to build the mapping.
by Marco ScaritoRead article →
Regulation10 May 20269 min read
EU AI Act August 2026: Swiss High-Risk AI Compliance
The EU AI Act's August 2026 deadline for high-risk systems is 83 days away. Swiss operators face fines up to 7% for non-compliant AI exports.
by Marco ScaritoRead article →
Regulation10 May 20269 min read
EU Digital Omnibus: Single Incident Reporting Point Simplifies Process But Leaves Compliance Complexity Intact
The EU Digital Omnibus proposes one portal for NIS2, DORA, GDPR and CER notifications — but different thresholds and timelines remain unchanged. Swiss firms must plan accordingly.
by Marco ScaritoRead article →
Threat Intel10 May 20269 min read
PAN-OS CVE-2026-0300: RCE Exploit Hits Swiss Networks
CVE-2026-0300 gives unauthenticated root RCE on PAN-OS User-ID. Swiss enterprises must patch or isolate affected firewalls now.
by Marco ScaritoRead article →
Analysis7 May 20267 min read
The CISO Game in Chiasso: What a Simulated Cyber Crisis Teaches That No Presentation Ever Could
A first-person account of the Supply Chain & Third Party Risk event in Chiasso — the second CISO gathering in Ticino in as many weeks — centred on an interactive crisis simulation that put 50 security leaders around the table to make real decisions under pressure.
by Marco ScaritoRead article →
Best Practices3 May 202611 min read
Hardening Microsoft 365 for Swiss Organisations: A Practical Security Checklist
A practical M365 hardening checklist for Swiss organisations covering Conditional Access, Entra ID Secure Score, Exchange Online protection, audit logging, and data residency.
by Marco ScaritoRead article →
Incident Report3 May 20268 min read
NCSC Week 19: Business Email Compromise Wave Hits Swiss SMEs — CHF 2.3M in Confirmed Losses
The NCSC Week 19 alert documents a BEC campaign targeting Swiss SMEs in manufacturing and logistics, with CHF 2.3M in confirmed wire transfer losses.
by Marco ScaritoRead article →
Threat Intel3 May 20269 min read
QR Code Phishing Targeting Swiss Microsoft 365 Tenants: An Adversary-in-the-Middle Campaign
A quishing campaign targeting Swiss Microsoft 365 tenants uses AiTM proxy infrastructure to bypass MFA and steal session tokens, with links to Eastern European APT activity.
by Marco ScaritoRead article →
Analysis28 April 202612 min read
Claude Mythos and Project Glasswing: Separating Fact from Hype on the AI Model Too Dangerous to Release
Anthropic's Claude Mythos can autonomously find zero-day vulnerabilities. A confirmed unauthorised access incident has already occurred. Swiss security teams need facts, not hype.
by Marco ScaritoRead article →
Threat Intel28 April 20268 min read
Microsoft Patch Tuesday April 2026: 165 CVEs, One Actively Exploited SharePoint Zero-Day
Microsoft's April 2026 Patch Tuesday fixed 165 CVEs including an actively exploited SharePoint zero-day (CVE-2026-32201) and a wormable Windows TCP/IP RCE. Triage guidance for Swiss IT teams.
by Marco ScaritoRead article →
Regulation28 April 20269 min read
Switzerland's Cyber Products Law: What the Federal Council's Draft Bill Means for Swiss Tech Companies
Switzerland's Federal Council is drafting a new cyber products law by autumn 2026, mirroring the EU Cyber Resilience Act. What Swiss manufacturers, importers, and software vendors must prepare for now.
by Marco ScaritoRead article →
Analysis14 April 202611 min read
AI Security at the Crossroads: 10 Takeaways from the Swiss Cyber AI Conference
Ten takeaways from the Swiss Cyber AI Conference — identity, least privilege for AI agents, poisoned agents, voice biometric deprecation, and the F1 security paradigm.
by Marco ScaritoRead article →
Regulation7 April 202611 min read
The EU Cyber Resilience Act's First Deadline Is in Five Months — Are Swiss Manufacturers Ready?
The EU Cyber Resilience Act's first mandatory deadline — vulnerability and incident reporting obligations — takes effect on 11 September 2026. Swiss manufacturers exporting digital products to the EU have five months to build compliant processes.
by Marco ScaritoRead article →
Threat Intel7 April 20268 min read
Fortinet FortiClient EMS Under Active Attack: Two Zero-Days, One Patch Window, and What Swiss Enterprises Must Do Now
Two critical zero-days in Fortinet FortiClient EMS — CVE-2026-35616 and CVE-2026-21643, both CVSS 9.1 — are being actively exploited in the wild. Swiss enterprises using FortiClient EMS must apply the emergency hotfix immediately.
by Marco ScaritoRead article →
Best Practices7 April 202610 min read
Patching Is Not Enough: Building a Vulnerability Management Programme That Holds Up to FINMA and ISA Scrutiny
Three critical zero-days in five weeks — Cisco FMC, Fortinet EMS twice — expose a common failure: organisations patch reactively but lack a structured vulnerability management programme. Here is what FINMA and the ISA now expect, and how to build it.
by Marco ScaritoRead article →
Analysis6 April 202610 min read
When the Safety-First AI Lab Ships Its Own Source Code to npm: Lessons from the Claude Code Leak
A source map misconfiguration in Claude Code v2.1.88 exposed Anthropic's internal codebase — 1,906 files and 44 hidden feature flags — via npm.
by Marco ScaritoRead article →
Analysis6 April 20269 min read
NCSC Semi-Annual Report H2 2025: What the First Mandatory Critical Infrastructure Data Tells Us
On 30 March 2026, the NCSC published its H2 2025 report — the first to integrate mandatory infrastructure notifications with voluntary reports.
by Marco ScaritoRead article →
Threat Intel6 April 20268 min read
The npm Trust Problem: How the Claude Code Leak and the Axios RAT Created a Supply Chain Emergency
Between 00:21 and 03:29 UTC on 31 March 2026, malicious axios versions with a Trojan went live on npm. DevSecOps lessons for Swiss engineering teams.
by Marco ScaritoRead article →
Threat Intel30 March 20269 min read
AI Agent Vulnerabilities in the Enterprise: LangChain, LangGraph and the Expanding Attack Surface
Three vulnerabilities disclosed in LangChain and LangGraph expose filesystem data, secrets, and conversation history in enterprise AI deployments.
by Marco ScaritoRead article →
Incident Report30 March 20268 min read
Identity Fraud with a Swiss Face: The NCSC's Warning on Fake Company Job Scams
The NCSC's Week 12 alert documents a new tactic: cloning registered Swiss companies to post fraudulent job ads and harvest applicants' data.
by Marco ScaritoRead article →
Best Practices30 March 202610 min read
Zero Trust Beyond the Buzzword: Why Microsegmentation Is the Control Swiss Enterprises Keep Skipping
Most Zero Trust implementations stop at identity, skipping microsegmentation — the control that limits damage once an attacker is inside.
by Marco ScaritoRead article →
Analysis28 March 20267 min read
The Scammers Are Evolving? No — We Are Not
A phishing email spoofing Microsoft via 'rnicrosoft.com' went viral. The technique is 20 years old. The surprise is that it still works.
by Marco ScaritoRead article →
Threat Intel23 March 20269 min read
AI-Driven Fraud in Switzerland: Deepfakes, Voice Cloning, and the New Social Engineering Threat
In January 2026, a Swiss entrepreneur transferred several million francs after calls from an entirely AI-generated voice.
by Marco ScaritoRead article →
Threat Intel23 March 20269 min read
Zero-Day Before the Patch: How Interlock Ransomware Exploited Cisco FMC for 36 Days Undetected
Amazon's threat intelligence team confirmed that Interlock ransomware began exploiting CVE-2026-20131 on 26 January 2026.
by Marco ScaritoRead article →
Regulation23 March 202610 min read
Digital Omnibus Enters Trilogue: What Swiss Compliance Teams Must Do Before the Final Text Lands
EU Digital Omnibus heads into trilogue: what Swiss compliance teams should do now on GDPR, AI Act, NIS2, and DORA before the final text lands.
by Marco ScaritoRead article →
Regulation23 March 202610 min read
The EU Digital Omnibus: What Swiss Organisations Must Understand Now
On 19 November 2025, the European Commission published the Digital Omnibus.
by Marco ScaritoRead article →
Analysis23 March 20268 min read
NCSC Annual Report 2025: Key Takeaways for Swiss Security Teams
The NCSC published its 2025 Annual Report on 16 February 2026. 64,733 incident reports, 222 mandatory notifications.
by Marco ScaritoRead article →
Incident Report23 March 20268 min read
The HTML Invoice Trap: Anatomy of the Phishing Campaign Targeting Swiss Companies Right Now
The NCSC's Week 11 alert covers a live campaign hitting Swiss companies: fake invoice ZIPs with HTML credential stealers and CAPTCHA evasion.
by Marco ScaritoRead article →
Threat Intel15 March 20258 min read
Ransomware Attacks on Swiss SMEs: A Growing Threat in 2025
New data from NCSC reveals a 34% increase in ransomware incidents targeting Swiss SMEs in 2025.
by Marco ScaritoRead article →
Regulation12 March 20256 min read
nDSG Compliance in 2025: What Swiss Companies Still Get Wrong
The revised nDSG is now in force. Persistent blind spots: incomplete records of processing activities.
by Marco ScaritoRead article →
Incident Report8 March 202510 min read
Spear Phishing in Swiss Finance: Anatomy of a 2025 Campaign
A spear phishing campaign targeting Swiss wealth managers used impersonated correspondence from Swiss financial regulators.
by Marco ScaritoRead article →
◎
No articles match your search.