ZERBEROS ist eine Schweizer Firma mit Sitz in Zürich, seit 1996 spezialisiert auf IT Sicherheitsprüfungen und Security Audits. Im Kundenauftrag führen wir Penetration Tests, Ethical Hacking, Security Audits, Red Team Angriffe und forensische Untersuchungen von Computern, Servern, mobile Geräte, Netzwerken und Applikationen durch. Diese auf Grund dieser Sicherheitsprüfungen erstellten Berichte dienen als Grundlage zur Bewertung der Risiken und … Read more
In der Nacht auf Montag, den 12. Oktober 2026, haben Angreifer die Kühlsysteme von mehreren hundert französischen Supermärkten aus der Ferne manipuliert. Statt zu kühlen, heizten die betroffenen Anlagen: In vielen Filialen stieg die Temperatur in Kühlregalen und Tiefkühltruhen während rund sechs Stunden auf etwa 50 Grad. Frische- und Tiefkühlware verdarb in grossem Umfang, in … Read more
Am Freitag, 9. Oktober 2026, hat Ricardo einen Datenabfluss bestätigt. Betroffen sind nach Angaben des Unternehmens rund 890’000 Nutzerkonten der Schweizer Handelsplattform, die zur SMG Swiss Marketplace Group gehört. Abgeflossen sind Namen, Postadressen und Telefonnummern aus Bestellungen, bei Geschäftskonten zusätzlich Firmennamen. E-Mail-Adressen und Passwörter sind laut Ricardo nicht betroffen. Die Benachrichtigung an die betroffenen Konten … Read more
In today’s connected world, technical security solutions are only one part of the defence against cyberattacks. The human factor often remains the biggest weakness in a company, especially when it comes to social engineering: the attempt to manipulate or deceive employees into disclosing confidential information or bypassing security measures. Effective employee security awareness is the … Read more
What this is about On September 23, 2026, the FBI and CISA jointly published a fact sheet aimed at critical infrastructure operators, addressing the security risks of working with third-party ICS integrators. These are the service providers that plan, install, configure, and maintain industrial control systems, meaning the SCADA systems, programmable logic controllers (PLCs), and … Read more
The same technology that protects our systems is being used to break them, and AI has kicked off an arms race in cybersecurity where both sides are running on the same engine. So who actually benefits more, the attackers or the defenders? Official voice In December 2025 the Swiss Federal Council published its assessment of … Read more
What happened In early September 2026, it emerged that the fintech Revolut had handed sensitive customer data to attackers posing as a government authority. The incident became public on September 11, 2026, after crypto investigator ZachXBT shared a notification email from Revolut. Revolut confirmed the incident shortly afterwards, describing it as a “sophisticated external impersonation … Read more
What this is about On September 16, 2026, CISA published new guidance explaining how organizations can better protect their networks using cyber decoys, which are digital lures and traps designed to detect, divert, and study attackers. The document explicitly targets small and mid-sized organizations as well, providing a practical step-by-step guide based on the MITRE … Read more
More than half of Swiss companies hit by ransomware pay the ransom: 54 percent according to Sophos’ “State of Ransomware 2025” report, which is a bit higher than the global average of 50 percent. Almost none of those payments ever become public though, and the few cases that do surface tell us more about the … Read more
The attack on NZZ and CH Media Around March 24, 2023, the Play ransomware group infiltrated the IT systems of the Neue Zürcher Zeitung, one of the oldest and most respected newspapers in Switzerland, and within hours large parts of the infrastructure were inoperable. The NZZ could not produce a complete print edition for several … Read more
In April 2024, Mandiant discovered that someone had logged into the Snowflake instances of over 165 companies, not through an exploit or a zero-day vulnerability but simply with usernames and passwords. The credentials originated from infostealers that had been running on contractor devices in some cases since 2020, and the result was one of the … Read more