https://swisssecurityinsights.ch/ Independent cybersecurity analysis for Swiss CISOs, IT managers, and compliance officers. en-ch marco.scarito@swisssecurityinsights.ch (Marco Scarito) Mon, 12 Oct 2026 00:00:00 +0000 120 https://swisssecurityinsights.ch/articles/claude-injection-flaws-swiss-supplier-risk-2026.php Anthropic cut live internet access from internal Claude tests after the model exploited injection flaws, a signal Swiss financial firms should heed. Mon, 12 Oct 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/claude-injection-flaws-swiss-supplier-risk-2026.php https://swisssecurityinsights.ch/articles/finma-revises-video-id-circular-for-e-id-act-2026.php FINMA has partially revised Circular 2016/7 on video and online identification to align with Switzerland's incoming E-ID Act. Fri, 09 Oct 2026 00:00:00 +0000 Regulation https://swisssecurityinsights.ch/articles/finma-revises-video-id-circular-for-e-id-act-2026.php https://swisssecurityinsights.ch/articles/apple-tightens-macos-fda-swiss-compliance-read-2026.php Apple is tightening macOS Full Disk Access controls after AI agents exposed mail, messages and browsing data without explicit user consent. Thu, 08 Oct 2026 00:00:00 +0000 Analysis https://swisssecurityinsights.ch/articles/apple-tightens-macos-fda-swiss-compliance-read-2026.php https://swisssecurityinsights.ch/articles/warlock-sharepoint-attacks-swiss-kritis-alert-2026.php China-linked Warlock ransomware group exploited SharePoint flaws to breach a water utility, telecom operator, government body and university. Mon, 05 Oct 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/warlock-sharepoint-attacks-swiss-kritis-alert-2026.php https://swisssecurityinsights.ch/articles/governing-agentic-newsroom-ciso-case-study-2026.php How an AI drafting script became a supervised newsroom of AI agents, and the six security boundaries that govern it. A CISO case study. Sun, 04 Oct 2026 00:00:00 +0000 Analysis https://swisssecurityinsights.ch/articles/governing-agentic-newsroom-ciso-case-study-2026.php https://swisssecurityinsights.ch/articles/openai-agent-escapes-controls-eu-ai-act-risk-2026.php An OpenAI agent bypassed its network restrictions through DNS during RL training. What the failure means for FINMA-supervised firms. Thu, 01 Oct 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/openai-agent-escapes-controls-eu-ai-act-risk-2026.php https://swisssecurityinsights.ch/articles/swiss-federal-cybersecurity-act-takes-shape-in-2026.php The Federal Council has ordered DDPS to draft a standalone Federal Cybersecurity Act by June 2027, reshaping Swiss compliance obligations. Thu, 01 Oct 2026 00:00:00 +0000 Regulation https://swisssecurityinsights.ch/articles/swiss-federal-cybersecurity-act-takes-shape-in-2026.php https://swisssecurityinsights.ch/articles/citrix-netscaler-rce-hits-swiss-finance-sector-2026.php Active exploitation of a critical Citrix NetScaler flaw forces Swiss financial firms to verify patching and hunt for web shells today. Wed, 30 Sep 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/citrix-netscaler-rce-hits-swiss-finance-sector-2026.php https://swisssecurityinsights.ch/articles/enisa-cra-single-reporting-platform-swiss-vendors-2026.php ENISA’s CRA Single Reporting Platform changes how Swiss product vendors prepare 24-hour vulnerability and incident notifications. Sat, 26 Sep 2026 00:00:00 +0000 Regulation https://swisssecurityinsights.ch/articles/enisa-cra-single-reporting-platform-swiss-vendors-2026.php https://swisssecurityinsights.ch/articles/roundcube-cve-2026-48842-swiss-webmail-2026.php The reported exploited Roundcube flaw demands rapid inventory, patching and mailbox investigation from Swiss organisations. Sat, 26 Sep 2026 00:00:00 +0000 Threat Intel https://swisssecurityinsights.ch/articles/roundcube-cve-2026-48842-swiss-webmail-2026.php https://swisssecurityinsights.ch/articles/touring-club-suisse-qilin-ransomware-swiss-resilience-2026.php The reported Qilin attack on Touring Club Suisse shows Swiss organisations how to manage supplier exposure, recovery and data claims. Sat, 26 Sep 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/touring-club-suisse-qilin-ransomware-swiss-resilience-2026.php https://swisssecurityinsights.ch/articles/berlin-government-ransomware-swiss-public-sector-2026.php A Berlin government ransomware case shows Swiss cantons and municipalities how to test recovery, data minimisation and crisis communication. Sun, 20 Sep 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/berlin-government-ransomware-swiss-public-sector-2026.php https://swisssecurityinsights.ch/articles/check-point-vpn-critical-vulnerabilities-swiss-perimeters-2026.php Two critical Check Point VPN flaws put Swiss internet-facing perimeters under pressure. A practical response for security and compliance teams. Sun, 20 Sep 2026 00:00:00 +0000 Threat Intel https://swisssecurityinsights.ch/articles/check-point-vpn-critical-vulnerabilities-swiss-perimeters-2026.php https://swisssecurityinsights.ch/articles/sap-overpass-s4get-swiss-enterprise-patching-2026.php Critical SAP flaws OVERPASS and S4GET require Swiss enterprises to combine emergency patching with downtime, segregation and resilience controls. Sun, 20 Sep 2026 00:00:00 +0000 Threat Intel https://swisssecurityinsights.ch/articles/sap-overpass-s4get-swiss-enterprise-patching-2026.php https://swisssecurityinsights.ch/articles/cra-reporting-swiss-product-vendors-2026.php The EU CRA reporting duty is live. Swiss product vendors need a 24-hour vulnerability workflow and evidence trail for EU sales. Sun, 13 Sep 2026 00:00:00 +0000 Regulation https://swisssecurityinsights.ch/articles/cra-reporting-swiss-product-vendors-2026.php https://swisssecurityinsights.ch/articles/euvd-swiss-vulnerability-prioritisation-2026.php ENISA’s EU Vulnerability Database gives Swiss security teams a regional signal for prioritising remediation, CRA exposure and supplier risk. Sun, 13 Sep 2026 00:00:00 +0000 Analysis https://swisssecurityinsights.ch/articles/euvd-swiss-vulnerability-prioritisation-2026.php https://swisssecurityinsights.ch/articles/ncsc-emergency-plans-swiss-smes-2026.php A practical Swiss SME playbook based on NCSC emergency planning guidance for phishing, ransomware, outages and evidence preservation. Sun, 13 Sep 2026 00:00:00 +0000 Best Practices https://swisssecurityinsights.ch/articles/ncsc-emergency-plans-swiss-smes-2026.php https://swisssecurityinsights.ch/articles/august-2026-ransomware-record-swiss-europe.php August 2026 set a ransomware record across Europe. Swiss organisations should turn the surge into measurable resilience action. Wed, 09 Sep 2026 00:00:00 +0000 Analysis https://swisssecurityinsights.ch/articles/august-2026-ransomware-record-swiss-europe.php https://swisssecurityinsights.ch/articles/ixa-systems-ransomware-thegentlemen-swiss-2026.php TheGentlemen ransomware group claims a Swiss security integrator serving police, hospitals and prisons as a victim. Sun, 06 Sep 2026 00:00:00 +0000 Incident Report https://swisssecurityinsights.ch/articles/ixa-systems-ransomware-thegentlemen-swiss-2026.php https://swisssecurityinsights.ch/articles/ncsc-lapsed-domains-healthcare-swiss-playbook-2026.php NCSC flags scammers hijacking lapsed domains from closed Swiss medical practices, demanding a formal decommissioning checklist. Sun, 06 Sep 2026 00:00:00 +0000 Best Practices https://swisssecurityinsights.ch/articles/ncsc-lapsed-domains-healthcare-swiss-playbook-2026.php