ctipilot.ch

Home · Briefs · CTI Weekly Summary — 2026-W26 (Jun 22 – Jun 28, 2026)

Swiss Post Cybersecurity — inaugural Swiss Threat Landscape Report `[SINGLE-SOURCE]`

From CTI Weekly Summary — 2026-W26 (Jun 22 – Jun 28, 2026) · published 2026-06-29

Swiss Post Cybersecurity published its first Swiss Threat Landscape Report at its Hack'Events conference (06-23), drawing on its own SOC, IR and offensive-security practice. For a Swiss public-sector SOC this is the most locally-grounded threat baseline of the week; the synthesis worth carrying beyond the daily's recap is that the report's emphasis on phishing, identity compromise and AI-abuse maps precisely onto the week's operational signal — the NCSC-CH M365 voicemail-phishing wave (§ 4), the Bluekit BitM and Klue OAuth identity attacks (§§ 2, 6), and AI-agent supply-chain abuse (§ 6). The local-vendor view and the week's incidents agree on where Swiss defenders should spend marginal effort: identity and the human layer, not perimeter CVEs alone.