May 2025 was marked by the publication of numerous vulnerabilities. The information is presented as a breakdown by category, highlighting various types of flaws such as injections, authorization issues, and other critical vulnerabilities.

In addition, the data is broken down according to the CVSS score.

Phishing is the attack technique behind more than 90% of cyber incidents in companies (Verizon DBIR, 2024). Every day, thousands of Swiss and European organizations are targeted by fraudulent emails aimed at stealing credentials, financial data, or deploying malware. Technical solutions alone—anti-spam, firewalls—are no longer sufficient against increasingly targeted attacks. PhishTrainer transforms your employees into the first line of defense with ultra-realistic phishing simulations, designed and hosted exclusively in Switzerland, in compliance with the Swiss legal framework on data protection.

No organization is immune to cyberattacks. According to ANSSI, the number of reported cyber incidents in France increased by 30% in 2023. The question is no longer if an attack will occur, but when. Anticipate, contain, and quickly restore your activities with a Cyber Action Plan (PAC) — your structured resilience framework for cybersecurity incidents.

Small and medium-sized enterprises (SMEs) represent 99.8% of the European economic fabric, but are also the target of 43% of global cyberattacks (Verizon Data Breach Investigations Report, 2024). Under-equipped and often with low awareness, they remain exposed to increasing risks. Discover why SMEs are particularly vulnerable to cyber threats and what concrete measures can be taken to strengthen their IT security.

In an era of accelerating digitization, businesses face a growing risk: cyberattacks. According to the Hiscox 2023 report, 53% of French companies experienced at least one cyberattack in the past year. In this context, actively monitoring security vulnerabilities has become an essential strategic priority to protect your systems, data, and reputation.

Regular updating of IT systems is the security practice of applying patches published by vendors as soon as they are available, in order to close known vulnerabilities before they are exploited. According to the Verizon Data Breach Investigations Report 2024, 32% of data breaches exploit vulnerabilities for which a patch already existed—making unapplied updates one of the most avoidable attack vectors.

Phishing is the number one cyber threat for businesses: according to ANSSI, it accounts for over 80% of security incidents reported in France. Based on social engineering, this technique deceives employees to steal credentials, spread malware, or divert funds. Discover how to effectively recognize, prevent, and manage this ever-present threat.

In order to fraudulently obtain over one billion dollars in 2016, hackers did not hesitate to flood the world with infected emails. More than 40% of global spam contains a ransomware.

As we mentioned in a previous note, SOS Data Recovery has launched a new service called "forensic computer," focused on finding evidence on computer equipment.

It is in this context that we followed with interest a study that ranked different European cities according to their vulnerability to cybercrime.

With the widespread adoption of smartphones, tablets, and other mobile computing devices that allow users to be reached, consult, and respond to emails virtually anywhere, companies are increasingly facing security problems.