Swiss cybersecurity analysis in your inbox — threats, regulation, incidents. Unsubscribe anytime.
Latest Articles
All 73 articles →
OWASP LLM Top 10 2026: Swiss Enterprise Priorities
OWASP reshaped its LLM Top 10 for 2026. Swiss teams should use it to reset AI threat models, supplier controls, and logging now.
Claude Code Trust: Swiss AI Supplier Controls 2026
How Swiss teams can assess Claude Code data flows, regional controls and prompt-injection risk without treating an allegation as evidence.
ICS Advisories: Swiss OT Patch Triage 2026
A Swiss OT patch-triage method for the June 2026 CISA advisories affecting SCADA, engineering and data-centre systems.
NIS2 Board Liability: Swiss EU Subsidiaries 2026
What NIS2 Article 20 requires of EU subsidiary boards, and why Swiss parents need a scoped, evidenced governance response.
Accenture Data Breach 2026: Swiss Third-Party Risk Response
Threat actor "888" listed 35 GB of Accenture data including Azure PATs, SSH keys and source code. Swiss DORA-supervised clients must activate third-party incident playbooks.
Exploit Speed vs Patch SLAs: Swiss FINMA and ISA Impact 2026
Q2 2026 data shows exploits ship 8 hours after Patch Tuesday. FINMA's 14-day patch SLA and ISA minimum standards cannot be met without automation.
SharePoint CVE-2026-58644 Zero-Day: Swiss Patch Guide 2026
CVE-2026-58644 (CVSS 9.8) is an actively exploited SharePoint zero-day. Attackers chain it with CVE-2026-50522 to steal IIS machine keys for persistent RCE.
Fortinet FortiSandbox OS Command Injection (CVE-2026-39808): Swiss Financial Perimeter at Critical Risk
CVE-2026-39808 (CVSS 9.8) enables unauthenticated OS command injection in FortiSandbox. CISA added it to KEV on July 14; exploitation is active. Swiss banks must patch urgently.
Azure CLI Password Spray Bypasses MFA: Swiss Entra Guide
An 81M-attempt password spray abused Azure CLI's ROPC flow to bypass MFA. How Swiss Microsoft 365 estates must harden Entra Conditional Access.
NCSC Alerts: Swiss Summer Scam Wave Defence Guide 2026
The NCSC flags E-Vignette phishing, fake Zoom updates and subscription invoice traps. A practical defence playbook for Swiss SMEs and employees.