Exposed OT After France's Fridge Hack: Swiss Lessons 2026
France's supermarket fridge sabotage repeats a known pattern: controllers reachable online, guarded by identities nobody manages.
26 articles
Analysis
Job Search Data Threat Model for Swiss Executives 2026
Why I built Jobdossiers, the four threats to job search data it was designed against, the exceptions it declares and the limit it cannot remove.
Swiss Cyber Storm 2026: 10 Takeaways on Shadow IT and AI
Ten takeaways from Swiss Cyber Storm 2026: shadow IT, shadow AI, the FINMA quantum roadmap expectation, agentic defence and the human factor.
Threat Model of a Newsroom of Agents: Prompt Injection
What an attacker controlling one feed item can try against an agentic newsroom, the layered controls in place, and the residual risk. A CISO threat model.
Apple Tightens macOS FDA: Swiss Compliance Read 2026
Apple is tightening macOS Full Disk Access controls after AI agents exposed mail, messages and browsing data without explicit user consent.
Governing an Agentic Newsroom: A CISO Case Study 2026
How an AI drafting script became a supervised newsroom of AI agents, and the six security boundaries that govern it. A CISO case study.
EUVD: A New Vulnerability Signal for Swiss Teams
ENISA’s EU Vulnerability Database gives Swiss security teams a regional signal for prioritising remediation, CRA exposure and supplier risk.
August 2026 Ransomware Record: Swiss Risk
August 2026 set a ransomware record across Europe. Swiss organisations should turn the surge into measurable resilience action.
Swiss Healthcare Cyber Attacks Up 41%: 2026 Threat Index
The Swiss Cyber Threat Index 2026 records 187 confirmed attacks on healthcare — a 41% surge. What the numbers mean before ISA reporting becomes routine.
OWASP LLM Top 10 2026: Swiss Enterprise Priorities
OWASP reshaped its LLM Top 10 for 2026. Swiss teams should use it to reset AI threat models, supplier controls, and logging now.
Claude Code Trust: Swiss AI Supplier Controls 2026
How Swiss teams can assess Claude Code data flows, regional controls and prompt-injection risk without treating an allegation as evidence.
Exploit Speed vs Patch SLAs: Swiss FINMA and ISA Impact 2026
Q2 2026 data shows exploits ship 8 hours after Patch Tuesday. FINMA's 14-day patch SLA and ISA minimum standards cannot be met without automation.
AI Patch Gap: 25 CVEs a Day, 1.5 Fixes — Swiss Guide 2026
AI finds 25 open-source flaws daily while maintainers patch 1.5. What the 16.5:1 deficit means for Swiss vulnerability management under CRA and ISA.
AI Code in Production: Swiss SDLC Risk Guide 2026
Half of engineering teams run AI-generated code in production while AI features fail pentests 2.7x more often. Swiss SDLC controls must adapt.
Financial Vendor Breaches Up 6.5x: Swiss Bank Risk 2026
Black Kite's 2026 report shows breaches among the top financial vendors rose from 6 to 39 in a year. What concentration risk means for Swiss banks.
Claude Fable 5's 19-Day Ban: How a Jailbreak Report Triggered US Export Controls on Anthropic's Flagship Model
US export controls pulled Claude Fable 5 offline for 19 days. The verified timeline, the jailbreak behind it, and what it means for Swiss AI governance.
WEF Cybersecurity Outlook 2026: Lessons for Swiss CISOs
WEF 2026 report: AI drives 87% of cyber risk perceptions and identity is the dominant attack path. Priorities for Swiss security leaders.
Sovereign Cloud: How EU Regulations Reshape Swiss Cloud 2026
DORA, NIS2, and the EU AI Act are creating hard data residency constraints for Swiss FinTech and HealthTech firms dependent on US hyperscalers.
Security ROI Metrics for Swiss Board Reporting 2026
A practical framework for translating security posture into financial risk metrics aligned with FINMA Circular 2023/1 board governance expectations.
The CISO Game in Chiasso: What a Simulated Cyber Crisis Teaches That No Presentation Ever Could
A first-person account of the Supply Chain & Third Party Risk event in Chiasso — the second CISO gathering in Ticino in as many weeks — centred on an interactive crisis simulation that put 50 security leaders around the table to make real decisions under pressure.
Claude Mythos and Project Glasswing: Separating Fact from Hype on the AI Model Too Dangerous to Release
Anthropic's Claude Mythos can autonomously find zero-day vulnerabilities. A confirmed unauthorised access incident has already occurred. Swiss security teams need facts, not hype.
AI Security at the Crossroads: 10 Takeaways from the Swiss Cyber AI Conference
Ten takeaways from the Swiss Cyber AI Conference — identity, least privilege for AI agents, poisoned agents, voice biometric deprecation, and the F1 security paradigm.
When the Safety-First AI Lab Ships Its Own Source Code to npm: Lessons from the Claude Code Leak
A source map misconfiguration in Claude Code v2.1.88 exposed Anthropic's internal codebase — 1,906 files and 44 hidden feature flags — via npm.
NCSC Semi-Annual Report H2 2025: What the First Mandatory Critical Infrastructure Data Tells Us
On 30 March 2026, the NCSC published its H2 2025 report — the first to integrate mandatory infrastructure notifications with voluntary reports.
The Scammers Are Evolving? No — We Are Not
A phishing email spoofing Microsoft via 'rnicrosoft.com' went viral. The technique is 20 years old. The surprise is that it still works.
NCSC Annual Report 2025: Key Takeaways for Swiss Security Teams
The NCSC published its 2025 Annual Report on 16 February 2026. 64,733 incident reports, 222 mandatory notifications.
No articles match your search.