More than half of Swiss companies hit by ransomware pay the ransom: 54 percent according to Sophos’ “State of Ransomware 2025” report, which is a bit higher than the global average of 50 percent. Almost none of those payments ever become public though, and the few cases that do surface tell us more about the … Read more
The attack on NZZ and CH Media Around March 24, 2023, the Play ransomware group infiltrated the IT systems of the Neue Zürcher Zeitung, one of the oldest and most respected newspapers in Switzerland, and within hours large parts of the infrastructure were inoperable. The NZZ could not produce a complete print edition for several … Read more
In April 2024, Mandiant discovered that someone had logged into the Snowflake instances of over 165 companies, not through an exploit or a zero-day vulnerability but simply with usernames and passwords. The credentials originated from infostealers that had been running on contractor devices in some cases since 2020, and the result was one of the … Read more
In early 2026 a group called TeamPCP published malicious versions of TanStack packages, and because TanStack is a dependency in countless JavaScript projects the malware spread to hundreds of organisations within hours. OpenAI had two compromised developer devices (they said “a limited number of internal repositories” were accessed, no customer data), at Grafana the entire … Read more
Over Easter 2025 chaos broke out at Marks & Spencer: card payments stopped working, Click & Collect went down, and from April 25th online shopping was gone entirely. For 46 days one of the UKs biggest retailers could not take a single internet order, and the final damage came to roughly 300 million pounds in … Read more