Skip to content

When Getting Phished Puts You in Mortal Danger

Phishing campaigns aren’t limited to scammers being out for your money. This article depicts what is likely a state-affiliated phishing campaign, or at the very least one that is sympathetic towards the state’s interest, that targets Russian citizens looking to join Ukrainian paramilitary groups. It is noteworthy that the phishing sites appear to be spread (…)

Web 3.0 Requires Data Integrity

In their article, the authors draw attention to the notion of data integrity and how integrity controls will take center stage in a world increasingly populated by AI agents, requiring verifiable, trustworthy personal data and computation. I found their layered perspective on understanding integrity failures particularly helpful, as it provides a comprehensive framework for identifying (…)

Why Google made a $32 billion bet on Wiz

This acquisition, for the astronomical sum of $32 billion, clearly demonstrates the importance of cloud AND cybersecurity services. With access to a large customer base and a world-class multi-cloud security platform, Google aims to better compete with AWS and Azure in an area where it is still struggling to catch up with its rivals.

CERIAS Weekly Security Seminar

The Center for Education and Research in Information Assurance and Security (CERIAS) at Purdue University hosts a weekly cyber security, privacy, resiliency or autonomy speaker, highlighting technical discovery or case studies or exploring cyber operational approaches. Check out their extensive repository of talks here!

CyLab researchers win Test of Time Award at USEC 2025

A team featuring CyLab researchers was honored with the Test of Time Award at the 2025 Symposium on Usable Security and Privacy (USEC 2025). The research team, featuring Patrick Gage Kelley (Ph.D.’12), CyLab alumnus; CyLab director Lorrie Cranor; and Norman Sadeh, co-director of Carnegie Mellon University’s Privacy Engineering Program.

CV Summit 2025

CV Summit Zurich is Europe’s premium blockchain, AI, and emerging tech business event which convenes leaders, facilitates high-level discourse and connection. It takes place in Switzerland, a leading blockchain landscape and home of ‘Crypto Valley’.

Bundesrat experimentiert mit eigener KI

Während es sehr begrüßenswert ist, dass der Bund sich augenscheinlich dafür entschieden hat, eine lokale in-house Lösung für die KI-Anwendung “Gov-GPT“ zu nutzen, ist es problematisch, dass das sogenannte “Open Source Large Language Model“ Llama von Meta ist. Von dem oft angebrachten Kritikpunkt, dass diese Modelle nur dem Namen nach “Open Source“ sind, da die (…)

Exclusive: Google will develop the Android OS fully in private, and here’s why

This article is interesting because it explains the reasons for Google’s change of position on Android OS development. The company is moving away from public contributions to the Android Open Source Project (AOSP) to streamline development and reduce merge conflicts. While Google commits to releasing source code post-release, reduced transparency remains a concern, as it (…)

Opt out: what to do with your 23andMe account after company filed bankruptcy

23andMe has filed for bankruptcy, raising concerns about data privacy. This article offers tips to the 15 million users of this direct-to-consumer service on how to delete their accounts. The research community proposed robust solutions to protect genetic data, yet it is unclear whether the company implemented any, given the massive hack it suffered last (…)

Factory Update Spring 2025 Subjects

This is a curated list of proposed subjects for the upcoming year for our C4DT partners. You can find more suggestions here: Additional Subjects. The projects are split in two categories: hands-on workshops, which are a 1-day training on a given subject, and project suggestions, based on current research of our affiliated labs: Summary of (…)

Factory Update Spring 2025 Subjects II

This is an additional set of hands-on workshops and projects for the upcoming year for our C4DT partners. You can find the chosen selection here: Main Subjects. The projects are split in two categories: hands-on workshops, which are a 1-day training on a given subject, and project suggestions, based on current research of our affiliated (…)

AI for Good Global Summit 2025

AI for Good is identifying innovative AI applications, building skills and standards, and advancing partnerships to solve global challenges.
The summit is organized by ITU in partnership with over 40 UN Sister Agencies and co-convened with the Government of Switzerland.

Swiss Crypto Day 2025

The Spring Crypto Day 2025 will take place in the Aula Polivalente, East Campus of the “Università della Svizzera italiana” – or USI for short. The East Campus of USI is located in Lugano (Switzerland), in Via la Santa 1, Viganello neighborhood. USI is Switzerland’s most international university, and one of the 12 certified public universities in Switzerland coordinated by swissuniversities.

SB021 – Strategy Use of AI systems in the Federal Administration

AI plays a vital role in the digitalization of the public sector. The strategy for integrating AI systems within the Swiss Federal Administration highlights the need for a multipronged approach. While I agree that developing skills and building trust are essential initial steps and likely top priorities, the true challenge lies in addressing the lack (…)

Cyber chiefs unveil new roadmap for post-quantum cryptography migration

This news illustrates how quantum technologies require forward planning in cybersecurity on unprecedented timescales (2035!), to protect against threats that exist in theory before they materialize in practice. What makes this particularly interesting is the proactive approach: the NCSC is implementing a ten-year strategic roadmap to prevent future breaches. The three-phase timeline recognizes both the (…)

GitHub suffers a cascading supply chain attack compromising CI/CD secrets

Supply chain attacks will continue to hit the news in an increasingly interconnected development ecosystem as organizations rely on third-party components and actions. This seems inevitable. What I find interesting about this case is the threat actors’ approach to compromise software while it is still under development, which sets itself apart from attacks such as (…)

Takeaways from our investigation on AI-powered school surveillance

Surveillance of children’s activities is being practiced by schools not only for security reasons but also with the intention of ensuring children’s well-being. On top of that, this article suggests that AI has unencrypted access to students’ activities and discussions. I like this article because it raises important concerns, poses open-ended questions, and sheds light (…)

ChatGPT est infesté par la désinformation russe… et, attention, Donald Trump veut aussi l’influencer

Le réseau Pravda, basé à Moscou, injecte des masses considérables de faux contenus dans les services d’IA d’OpenAI comme de Google. En parallèle, l’administration américaine somme les scientifiques de l’IA d’éliminer les «biais idéologiques» de leurs modèles.
Avec la participation de Jean-Pierre Hubaux, directeur académique du C4DT.

Symposium Valaisan de la Donnée 2025

This symposium is jointly organized by Trust Valley and Groupe Mutuel. It is part of the Tech4Trust Roadshow event series, which supports startups in the field of cybersecurity and digital trust. Expect insightful panel discussions and engaging startup pitches. During this Roadshow, discover the issues and challenges related to Ethical & Explainable AI, economy of data, data privacy, data security. C4DT’s academic director Jean-Pierre Hubaux will speak at the event. More information will follow.

China wants tech companies to monetize data, but few are buying in

I find China’s attempt to treat data as a formal business asset quite interesting, especially given the massive amount of data the country generates. Companies seem reluctant to adopt this policy though, with only 283 out of 60 million companies participating. But it is still early days, and the months and years to come will (…)