IBM Aspera Faspex Flaw: Swiss Finance Deadline 2026
A critical, actively exploited IBM Aspera Faspex authorization bypass forces Swiss financial institutions to patch against a hard CISA deadline.
Practitioner-level coverage of threats, incidents and regulation — FINMA, ISA, DORA, NIS2 and the CRA — by Marco Scarito and the SSI newsroom.
Weekly briefing · free
Monday morning, one email: the week in Swiss security.
A critical, actively exploited IBM Aspera Faspex authorization bypass forces Swiss financial institutions to patch against a hard CISA deadline.
CISA added the actively exploited OpenSSH SSHole flaw to its KEV catalogue with a 2026-11-12 patch deadline affecting Swiss SSH infrastructure.
A SonicOS SSLVPN flaw bypasses SAML-enforced MFA, is under active exploitation, and carries a tight CISA remediation deadline.
A proof-of-concept shows malicious browser extensions can abuse Claude's Dispatch feature to run code on desktops.
A Zyxel switch zero-day, CVE-2026-107441, is under active exploitation; Swiss network operators should audit and patch now.
Binance's own report traces the USD 6.34 billion theft to a tampered developer tool, a fake job interview and an internal AI tool used to pivot.
An APT group is exploiting a Cisco SD-WAN authentication bypass to deploy custom KeyDrift malware, demanding urgent action from Swiss network teams.
France's supermarket fridge sabotage repeats a known pattern: controllers reachable online, guarded by identities nobody manages.
A newly chained Ivanti Connect Secure flaw enables unauthenticated root access, forcing Swiss operators toward today's CISA BOD 26-04 deadline.
Report
SSI’s periodic report on Swiss threat intelligence, incidents and regulation. Free for every newsletter subscriber: the latest edition is linked in each weekly briefing.
Get the report