Author: Nico Ebert
-
From Procedures to Peril: Why Privacy Needs a Shift Toward Risk Transparency
Data privacy is everywhere and yet, for most people, it remains deeply opaque. Cookie banners, privacy policies, and app permissions are meant to inform us, but in reality, they often fail to answer the most important question: What could actually happen to me? This challenge is at the heart of our recent article, “From Procedures…
-
Research Update
In this Research Update, we present two articles: Article 1: Learning from safety – What cybersecurity can learn from reporting systems This article is a review article published in the Journal of Cybersecurity (2025). It summarizes the current state of research, critically evaluates existing knowledge, and develops new perspectives. The research team – including members…
-
CAS Cyber Risk Awareness – Review after the First Implementation
In Switzerland, too, we read almost daily in the newspapers about cyber-attacks on companies and other organisations. These attacks often affect customer or employee data. Technical protective measures and processes are important for preventing such attacks. However, many attacks target the ‘human’ factor, such as phishing via email to obtain employee login details. It is…
-
Der Faktor Mensch in der Cybersicherheit
Dieser Beitrag von Sibylle Veigl über den CYRENZH “CAS Cyber Risk Awareness” erschien erstmals in der Dezember-Ausgabe des Magazins «Impact» der Zürcher Hochschule für Angewandte Wissenschaften. Angriffe von Cyberkriminellen auf Unternehmen nehmen rasant zu, mögliche Schäden können gravierend sein. Technik und organisatorische Massnahmen allein sind keine Antwort mehr darauf. Zum Schutz vor solchen Risiken gehört heute…
-
Human Factors in Cybersecurity – Insights from Research
On September 11th, CYRENZH organized an event on “Human Factors in Cybersecurity” at the University of Zurich. The event brought together 40 participants from both industry and academia, fostering insightful discussions on the challenges and opportunities in understanding and improving cybersecurity behavior. The afternoon began with a warm welcome from Dr. Melanie Knieps (CYRENZH) and Prof.…
-
CAS Cyber Risk Awareness
Organizations are increasingly threatened by cyber risks that can have serious economic and human consequences. Understanding the human factor is becoming increasingly important in protecting against cyber-attacks. A “wrong click” on a malicious email attachment can lead to business failure, loss of personal data and reputational damage. Raising the awareness of management, specialist departments (e.g.…
-
Preventing cyber incidents in organizations: What can we learn from 100 years of safety research?
If a cyber incident is successful in an organization, an external attacker is often involved. However, many causes lie within the organization, e.g. insufficiently secure processes, systems or insecure behaviour. There are direct parallels here between cybersecurity and the area of safety. The difference, however, is that the field of safety and safety research is over a…
-
Introducing our P.h.D. Network
We are happy to announce the CYRENZH Ph.D. Network in Cybersecurity. Our goal to connect excellent students with a master’s degree, supervisors, and funding opportunities and facilitate interdisciplinary research. The network is a “proof of principle” and a precursor to a potential “Cybersecurity Ph.D. Program”. Therefore, the network currently relies on bringing together interested students…