Claude Dispatch Flaw Tests Swiss AI Governance 2026
A proof-of-concept shows malicious browser extensions can abuse Claude's Dispatch feature to run code on desktops.
37 articles
Threat Intel
Zyxel Switch Zero-Day: Swiss Networks at Risk 2026
A Zyxel switch zero-day, CVE-2026-107441, is under active exploitation; Swiss network operators should audit and patch now.
Cisco SD-WAN Bug: Swiss Banks Face KeyDrift in 2026
An APT group is exploiting a Cisco SD-WAN authentication bypass to deploy custom KeyDrift malware, demanding urgent action from Swiss network teams.
Ivanti Root Exploit Chain: Swiss Compliance Test 2026
A newly chained Ivanti Connect Secure flaw enables unauthenticated root access, forcing Swiss operators toward today's CISA BOD 26-04 deadline.
Cisco Firewall DoS Flaw: Swiss Patch Deadline 2026
Cisco patched an actively exploited ASA/FTD DoS flaw; Swiss financial and KRITIS operators face a CISA-aligned 2026-11-01 action deadline.
NIK C2: AI-Augmented Threat for Swiss Banks 2026
Cisco Talos identified NIK C2, an AI-integrated command-and-control framework in active use, raising detection concerns.
PHP2Shell RCE: Swiss Banking Patch Emergency 2026
A stale request-state flaw in PHP is under active exploitation with Mirai payloads, forcing Swiss financial firms toward a hard patch deadline.
Arista VeloCloud SQLi: Swiss SD-WAN Alert 2026
CISA's active-exploitation listing of an Arista VeloCloud Orchestrator SQL injection sets an urgent patch deadline for SD-WAN operators.
x402 SDK Flaw: Swiss AI Agent Payment Risk 2026
A critical x402 SDK flaw let malicious APIs drain AI agents' full token balances, exposing gaps Swiss financial firms must close now.
Swiss CISOs Face BeyondTrust Zero-Day Deadline 2026
A China-linked APT exploited a BeyondTrust Remote Support auth bypass as a zero-day, forcing Swiss financial firms to meet today's CISA patch deadline.
Swiss CISOs Face PAN-OS RCE Patch Deadline 2026
A root-privilege PAN-OS flaw is under active exploitation, forcing Swiss financial and critical infrastructure firewall teams into urgent patching.
Roundcube CVE-2026-48842: Swiss Webmail Risk
The reported exploited Roundcube flaw demands rapid inventory, patching and mailbox investigation from Swiss organisations.
Check Point VPN Flaws: Swiss Perimeter Risk 2026
Two critical Check Point VPN flaws put Swiss internet-facing perimeters under pressure. A practical response for security and compliance teams.
SAP OVERPASS and S4GET: Swiss Patch Risk 2026
Critical SAP flaws OVERPASS and S4GET require Swiss enterprises to combine emergency patching with downtime, segregation and resilience controls.
PaperCut CVE-2026-82078: Swiss Print Servers Under Attack
CVE-2026-82078, an actively exploited PaperCut flaw in CISA KEV, threatens Swiss hospitals, cantons and universities.
Windows AFD.sys Zero-Day: Lazarus Hits Swiss Endpoints
CVE-2026-68820, a Windows kernel zero-day exploited by Lazarus, threatens Swiss banks, insurers and federal suppliers.
VMware vCenter Zero-Day Hits Swiss Virtualisation 2026
A CVSS 9.8 VMware vCenter flaw under active exploitation gives attackers root access across Swiss virtualisation estates.
Critical Metabase SQLi Targets Swiss BI Platforms 2026
A CVSS 10.0 Metabase SQL injection in CISA KEV creates a direct path from BI dashboards to core databases for Swiss organisations.
Zoom "Zoomsday": Annotation RCE Hits Every Platform 2026
Three memory-corruption CVEs in Zoom's annotation engine allowed zero-click RCE across all platforms. Patches shipped in June and July 2026.
SharePoint CVE-2026-58644 Zero-Day: Swiss Patch Guide 2026
CVE-2026-58644 (CVSS 9.8) is an actively exploited SharePoint zero-day. Attackers chain it with CVE-2026-50522 to steal IIS machine keys for persistent RCE.
Fortinet FortiSandbox OS Command Injection (CVE-2026-39808): Swiss Financial Perimeter at Critical Risk
CVE-2026-39808 (CVSS 9.8) enables unauthenticated OS command injection in FortiSandbox. CISA added it to KEV on July 14; exploitation is active. Swiss banks must patch urgently.
GitLost: How a GitHub AI Agent Was Tricked Into Leaking Private Repositories
Noma Labs' GitLost showed how a prompt injection in a public GitHub issue coerced GitHub's AI agent into exfiltrating private repository contents. What it means for Swiss engineering teams.
Chrome V8 Zero-Day CVE-2026-11645: Swiss Risk 2026
CVE-2026-11645, an actively exploited Chrome V8 zero-day on the CISA KEV list, turns any visited web page into a code-execution risk for Swiss endpoints.
RoguePlanet CVE-2026-47281: Swiss Endpoint Zero-Day 2026
CVE-2026-47281 (RoguePlanet, CVSS 9.6) exploits Microsoft Defender via VS Code integration to achieve SYSTEM-level escalation on any Windows endpoint.
SearchLeak CVE-2026-42824: M365 Copilot One-Click Data Theft
Varonis disclosed SearchLeak (CVE-2026-42824): a one-click attack chain that turned M365 Copilot into a data exfiltration tool targeting emails and files.
Citrix NetScaler CVE-2026-3055: Swiss Perimeter Alert 2026
CVE-2026-3055 is exploited at scale against Citrix NetScaler — the dominant SSL-VPN and load balancer in Swiss banking and enterprise perimeters.
Dirty Frag Zero-Day Hits Swiss Linux Infrastructure 2026
CVE-2026-43500 grants root on all major Linux distributions. Swiss banks, cloud workloads, and VPN gateways running IPsec are immediately exposed.
APT28 Deploys PRISMEX Against EU Defence Supply Chains: Anatomy of an Eleven-Day Zero-Day Window
Russia-linked APT28 exploited CVE-2026-21513 for eleven days before patching, deploying PRISMEX across NATO logistics networks. Swiss dual-use exporters face direct exposure.
PAN-OS CVE-2026-0300: RCE Exploit Hits Swiss Networks
CVE-2026-0300 gives unauthenticated root RCE on PAN-OS User-ID. Swiss enterprises must patch or isolate affected firewalls now.
QR Code Phishing Targeting Swiss Microsoft 365 Tenants: An Adversary-in-the-Middle Campaign
A quishing campaign targeting Swiss Microsoft 365 tenants uses AiTM proxy infrastructure to bypass MFA and steal session tokens, with links to Eastern European APT activity.
Microsoft Patch Tuesday April 2026: 165 CVEs, One Actively Exploited SharePoint Zero-Day
Microsoft's April 2026 Patch Tuesday fixed 165 CVEs including an actively exploited SharePoint zero-day (CVE-2026-32201) and a wormable Windows TCP/IP RCE. Triage guidance for Swiss IT teams.
Fortinet FortiClient EMS Under Active Attack: Two Zero-Days, One Patch Window, and What Swiss Enterprises Must Do Now
Two critical zero-days in Fortinet FortiClient EMS — CVE-2026-35616 and CVE-2026-21643, both CVSS 9.1 — are being actively exploited in the wild. Swiss enterprises using FortiClient EMS must apply the emergency hotfix immediately.
The npm Trust Problem: How the Claude Code Leak and the Axios RAT Created a Supply Chain Emergency
Between 00:21 and 03:29 UTC on 31 March 2026, malicious axios versions with a Trojan went live on npm. DevSecOps lessons for Swiss engineering teams.
AI Agent Vulnerabilities in the Enterprise: LangChain, LangGraph and the Expanding Attack Surface
Three vulnerabilities disclosed in LangChain and LangGraph expose filesystem data, secrets, and conversation history in enterprise AI deployments.
AI-Driven Fraud in Switzerland: Deepfakes, Voice Cloning, and the New Social Engineering Threat
In January 2026, a Swiss entrepreneur transferred several million francs after calls from an entirely AI-generated voice.
Zero-Day Before the Patch: How Interlock Ransomware Exploited Cisco FMC for 36 Days Undetected
Amazon's threat intelligence team confirmed that Interlock ransomware began exploiting CVE-2026-20131 on 26 January 2026.
Ransomware Attacks on Swiss SMEs: A Growing Threat in 2025
New data from NCSC reveals a 34% increase in ransomware incidents targeting Swiss SMEs in 2025.
No articles match your search.