The ClickFix Deception: How a Fake CAPTCHA Deploys an Evasive Infostealer

By  Louis Schürmann

Swiss Post Cybersecurity detected and analyzed an infostealer campaign. The attackers use Clickfix for initial access and DonutLoader for shellcode de …

Read more

The invisible attack

By  Swiss Post Cybersecurity

An X-ray image disappears. Laboratory software goes haywire. A medication dispenser suddenly dispenses double the dose. What sounds like a movie scena …

Read more

Understanding Physical Intrusion in Pentesting: The Unseen Force in Cybersecurity - Part 1

By  Nicolas Aunay

The Art of Physical Intrusion Physical intrusion is an essential yet often overlooked component in the ever-evolving field of cybersecurity. While cyb …

Read more

Swiss Post Cybersecurity at the 37th Annual FIRST Conference in Copenhagen

By  Swiss Post Cybersecurity

Strong Impulses for Incident Response A key highlight was the ransomware incident response training, which was very practical. Despite our well-establ …

Read more

Press Release

By  Swiss Post Cybersecurity

Aarau and Morges, 21.5.2025. Swiss Post Cybersecurity AG has just successfully concluded its series of security conferences in three parts of the coun …

Read more

NIS2: The EU directive with implications for Swiss cybersecurity

By  Swiss Post Cybersecurity

Overview The Network and Information Systems Directive2 (NIS2) is an updated legal framework designed to improve cybersecurity in the European Union. …

Read more

Do my new use cases keep their promise?

By  Swiss Post Cybersecurity

Use Case Testing Preparation The first step is to analyze which types of logs exist and which could be used to detect the suspicious behavior. How is …

Read more

ISO Privacy Framework - Principles of data protection - Part 1

By  Swiss Post Cybersecurity

Information security and privacy Many companies are currently unsure whether their IT security measures and any existing ISMS already meet data protec …

Read more

ISO Privacy Framework - Privacy Impact Assessment (PIA) - Part 2

By  Swiss Post Cybersecurity

The Privacy Impact Assessment (PIA) should begin as early as possible in a project, be it a new project or the conversion of an infrastructure - prefe …

Read more

Pay more attention to your vulnerability management

By  Philipp Scheiwiler

Vulnerability versus configuration management Nowadays, IT professionals are inundated with reports of vulnerabilities. In most cases, these are produ …

Read more