Claude Dispatch Flaw Tests Swiss AI Governance 2026
A proof-of-concept shows malicious browser extensions can abuse Claude's Dispatch feature to run code on desktops.
Practitioner-level coverage of threats, incidents and regulation — FINMA, ISA, DORA, NIS2 and the CRA — by Marco Scarito and the SSI newsroom.
Weekly briefing · free
Monday morning, one email: the week in Swiss security.
A proof-of-concept shows malicious browser extensions can abuse Claude's Dispatch feature to run code on desktops.
A Zyxel switch zero-day, CVE-2026-107441, is under active exploitation; Swiss network operators should audit and patch now.
Binance's own report traces the USD 6.34 billion theft to a tampered developer tool, a fake job interview and an internal AI tool used to pivot.
An APT group is exploiting a Cisco SD-WAN authentication bypass to deploy custom KeyDrift malware, demanding urgent action from Swiss network teams.
France's supermarket fridge sabotage repeats a known pattern: controllers reachable online, guarded by identities nobody manages.
A newly chained Ivanti Connect Secure flaw enables unauthenticated root access, forcing Swiss operators toward today's CISA BOD 26-04 deadline.
Why I built Jobdossiers, the four threats to job search data it was designed against, the exceptions it declares and the limit it cannot remove.
Cisco patched an actively exploited ASA/FTD DoS flaw; Swiss financial and KRITIS operators face a CISA-aligned 2026-11-01 action deadline.
Cisco Talos identified NIK C2, an AI-integrated command-and-control framework in active use, raising detection concerns.
Report
SSI’s periodic report on Swiss threat intelligence, incidents and regulation. Free for every newsletter subscriber: the latest edition is linked in each weekly briefing.
Get the report