Why companies rely on AI agents

Away from the hype, AI agents are establishing themselves as the real driving force behind the digital transformation of companies. 2025 will probably be remembered as the year of AI agents.

Yvan Cognasse from Oracle explains why AI agents are being used in more and more companies. (Image: zVg / Oracle)

According to Deloitte, one in four companies already using generative AI will test AI agents in pilot projects or proofs of concept. This figure is likely to double by 2027. In Switzerland, particularly in the financial sector, this development is already in full swing. But the challenges are real: outdated systems, inadequate data quality and a shortage of specialists are still slowing down some projects. The companies that will be successful are those that integrate AI into their strategy, invest in modern interfaces and provide their teams with targeted training. Why are AI agents winning over more and more organizations? Here are the reasons.

1. automate in order to focus on value creation

AI agents execute complex business processes quickly, precisely and consistently. They take on repetitive tasks - from document processing to real-time analyses - and enable the complete automation of certain workflows. Example: The onboarding of suppliers or logistics partners, which used to be done manually, can now be fully automated. The agents analyse documents, standardize them and generate inquiries, invoices or payment orders within seconds - ready for approval. The result: more time for strategic, creative and interpersonal tasks. Capgemini estimates that 64 % of companies are aiming for exactly this effect, and BCG predicts up to 60 % productivity gain in the long term.

2. a personalized experience for All employeesn offer

AI agents are not rigid: they adapt to roles, contexts and preferences in order to provide individual support. Some concrete examples:

  • In HR: An agent helps employees to update their rights, benefits or personal data after a marriage or birth.
  • In sales: An agent creates dynamic customer profiles with history, sentiment, contract status and generates personalized e-mails that can be sent immediately.
    The result: higher individual productivity and a better employee experience.

3. promote human-machine collaboration

In the future, multiple AI agents will collaborate with each other and with humans to solve complex problems and achieve common goals. In a networked environment (ERP, collaboration tools, CRM, etc.), this intelligent cooperation paves the way for finer, contextual automation - and more job satisfaction. It is the transition from incremental improvements to real business transformations.

4. increase resilience and competitiveness

Using AI agents today means preparing for the future. Every project launched strengthens the culture of innovation, increases digital maturity and creates sustainable value. Waiting probably means widening the gap with the competition. Taking action means creating a competitive advantage based on performance and agility.

Conclusion: The time of isolated experiments is over. AI agents are redefining work, processes and collaboration. Companies that focus on a structured, mature and well-managed AI strategy now will benefit in the long term. Now is the time to turn technological momentum into a real business lever.

 

To the author:
Yvan Cognasse is Head of Enterprise Architects, Continental Europe, at Oracle.

Task scams: A form of fraud with strong growth

Recent studies by Trend Micro reveal a global shadow industry with gamified fraud platforms, fake websites and cryptocurrencies. So-called "task scams" are on the rise. These are sophisticated online job scams that lure victims with seemingly harmless digital tasks and systematically deprive them of their money by making ever new financial demands.

This is how task scams work. (Graphic: Trend Micro)

Cyber criminals do not stop at job seekers: cybersecurity service provider Trend Micro has uncovered a widespread, global criminal infrastructure that imitates reputable companies, exploits trustworthy communication channels and lures job seekers into traps with gamification elements. Victims take on simple tasks, such as liking and subscribing to social media pages or writing product reviews, which are completed in groups of typically 30 to 40 tasks at a time. Many victims report that they initially receive small commissions to build trust. Subsequently, however, they have to make higher and higher deposits in order to receive supposedly more lucrative commissions. This continues until the victims no longer make any new payments and lose the sums paid in and the supposed wages.

Millions moved in cryptocurrencies

According to security researchers, the perpetrators transfer millions of euros via cryptocurrency wallets, while the victims lose between a few hundred and hundreds of thousands of euros. In one case, a single wallet received payments of over 160,000 euros (187,000 USD) in less than two months. Another wallet was linked to transactions amounting to more than 1 million euros (1.2 million USD).

The report is based on direct interactions with scammers, infrastructure mappings of malicious websites and forensic analyses of associated cryptocurrency wallets and shows the key approaches of the "task scammers":

  • Imitation of real companiesincluding recruitment agencies and digital agencies
  • Gamified cheating platforms with VIP levelsreward series and incentive systems
  • Widespread use of SMSWhatsApp, Telegram and fake websites to create credibility
  • Domain registrations via notorious registrar services, with 
    Hundreds of identified lookalike domains
  • Cryptocurrency paymentsthat conceal money flows and facilitate international money laundering

Those affected report a high level of emotional stress and behavioral patterns that are reminiscent of gambling addiction. In some cases, task scams are also linked to larger criminal structures involving forced labor in scam operations and human trafficking in Southeast Asia.

More transparent recruitment practices required

"Task scams have become one of the most financially and psychologically damaging cybercrime threats facing individuals today," said Robert McArdle, Director of Forward Looking Threat Research at Trend. "The underlying infrastructure - from domain registrars to SMS delivery services - requires immediate attention. Companies can reduce the risk by being transparent about their recruitment practices and training job seekers on how to recognize legitimate communications."

Facebook post warning of a task scam. (Image: Trend Micro)

Such modern fraud methods are highly targeted and designed to remain undetected. In a recent Trend Micro global study of over 6,500 consumers, 39% of respondents said they only realized they had fallen victim to a scam after they had already lost a significant amount of money. To protect against such scams, Trend Micro has developed the apps ScamCheck and Scam Radar developed. This allows users to recognize early on when they are being targeted by fraudsters. Scam Radar provides real-time protection by identifying the scams used by cybercriminals as they happen. Users are warned immediately and can take countermeasures before any damage is done. 

Source: Trend Micro

Pollutec 2025: Key topics for industry, the environment, cities and regions

From October 7 to 10, 2025, the Lyon edition of Pollutec will be all about action and innovation. Health, decarbonization, bioeconomy and science will form the core of an ambitious programme that addresses the key environmental issues facing industry, regions and public decision-makers.

The environmental trade fair Pollutec 2025 will take place in Lyon from October 7 to 10. (Image: Pollutec)

Pollutec has been the leading European trade fair for environmental and climate protection for 47 years. It is aimed at industry, cities and regions. Last year, an additional format was held in Paris, Porte de Versailles, for the first time. Nevertheless, Lyon remains an extremely attractive location every two years: 51,000 trade visitors and 2,000 exhibitors, including 200 start-ups, attended in 2023.

Springboard for eco-innovations

We are currently seeing ecological regression and dwindling commitment. Nevertheless, Pollutec continues to see itself as a springboard for eco-innovations. The trade fair is convinced that ecological change is a transnational issue and even sees it as a key to European sovereignty. Pollutec Exhibition Director Anne-Manuèle Hébert comments: "Pollutec 2025 is taking place in an unusual political context - unfortunately, the signs for an ecological turnaround are not green. The environment is not a political issue - ecology is a science. Pollutec's task is to present solutions for the ecological transformation of companies and regions that could make a more liveable future possible. In doing so, we always pursue a systemic approach - in our view the only one that is viable and sustainable in the long term. Science will therefore be a central theme of the upcoming edition of the trade fair. Because without reliable, verified data that has been validated by research experts, we will not make any progress. Pollutec is firmly committed to action and to change in industry and regions."

Diverse supporting program

With its 2025 edition in Lyon, Pollutec remains clearly focused on environmental issues. The focus remains on key topics relating to the transformation of companies.
The event will focus on four main topics, from which the supporting program of Pollutec 2025 will also be derived:

  • Health: making the interdependence of environment and health visible and rethinking our lifestyles to create a healthier and more sustainable future.
  • Decarbonization: exploring innovative solutions to effectively reduce the carbon footprint in industry and regions.
  • Bioeconomy: moving away from fossil resources, strengthening local and natural resources and promoting a regenerative, nature-based economy.
  • Science: Putting knowledge and research back at the center of environmental policy debates.

Once again this year, Pollutec is offering a wide-ranging program with an international scope - including panel discussions with leading minds in the industry and inspiring presentations: 400 specialist lectures, 16 discussion forums, the Pollutec Innovation Awards, business meetings, themed forums and villages, international delegations, etc.

Tickets are already available on the website: https://www.pollutec.com/fr-fr/registration.html

WZL invites you to the 3D Metrology Conference

The 10th edition of the 3DMC at the WZL of RWTH Aachen University will offer participants a varied program on future-oriented topics in the field of industrial metrology from September 16 to 18, 2025.

The Industry Forum will be held in the WZL's machine hall. (Image: WZL / RWTH Aachen)

The 3DMC is one of the most important conferences in the field of industrial metrology. It is organized by the Machine Tool Laboratory WZL of RWTH Aachen University in cooperation with the National Physical Laboratory (NPL), Loughborough University (LBoro), University College London (UCL), the Physikalisch-Technische Bundesanstalt (PTB) and TEKNIKER, and hosted jointly with WZL Aachen GmbH. After successful editions in Aachen, Hamburg, London, Bilbao and Loughborough, the conference will return to its founding venue, the Melaten Campus, in 2025.

Up to 200 industrial users and academically renowned experts exchange ideas at the 3DMC and shape the innovative and open character of the event. Participants can expect an exciting and varied program. Two special highlights are the keynote speech on the future of industrial metrology by Prof. Heiko Wenzel-Schinzer, Chairman of VDMA Length Measurement Technology, and the hands-on workshop on state-of-the-art machine tool calibration by SIOS Messtechnik GmbH. The varied lecture program will be paired with an open industry forum, special interest sessions and dedicated networking formats. Prof. Ben Hughes and Prof. Robert Schmitt will moderate and host the event.

At the Industry Forum, which will once again take place in the WZL's machine hall, participants will be presented with innovative use cases live and can discuss them with the community. In combination with technical presentations on industrial applications and scientific innovations, the 3DMC offers the opportunity to combine further training and industry networking for companies and their employees. Participation as a delegate is still possible.

Further information and registration: www.3dmc.events

ISC2 updates its ISSAP, ISSEP and ISSMP certifications

Updates include new exam guidelines and AI-powered adaptive training to help CISSPs and experienced cybersecurity professionals better demonstrate their expertise.

Self-study for cybersecurity experts: The International Information System Certification Consortium (ISC2) has updated the examination guidelines and is introducing new AI-supported courses. (Image: Unsplash.com)

The world's leading non-profit membership organization for cybersecurity professionals ISC2 has announced updated exam guidelines and the introduction of new AI-powered, adaptive self-study courses for its three most advanced security certifications. These include the Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP) and Information Systems Security Management Professional (ISSMP).

Deepening specialist knowledge

These updates take into account the latest best practices in the respective areas and ensure that the certifications meet the current requirements of the industry. The self-study courses help professionals prepare for the updated exams. They help CISSPs and other experienced professionals deepen their expertise, validate their specialized skills and position themselves for leadership roles in their organizations.

"Our most advanced certifications are aimed at CISSPs who want to take the next qualification step, as well as experienced professionals who want to achieve the highest standards of cybersecurity professional education," said Casey Marks, Chief Operating Officer of ISC2. "We are committed to ensuring these certifications remain relevant and impactful. These comprehensive updates reflect our continued investment in our certification programs and our commitment to our members that their credentials are recognized as world-leading."

Revised Test Guidelines

The updated exam guidelines, developed through a rigorous Job Task Analysis (JTA) and reviewed by global subject matter experts, reflect evolving cybersecurity challenges and industry expectations. The revised domains provide a clear, modernized roadmap to the knowledge required to lead effectively in each specialty. The following exam reviews are now available: 

ISSAP exam topics   

  • Domain 1: Governance, risk and compliance (GRC)
  • Domain 2: Modeling the security architecture
  • Domain 3: Infrastructure and system security architecture
  • Domain 4: Identity and Access Management (IAM) architecture

ISSEP exam topics   

  • Domain 1: Basics of system security technology
  • Domain 2: Risk management
  • Domain 3: Security planning and technology
  • Domain 4: Implementation, verification and validation of system security
  • Domain 5: Safe operating procedures, change management and disposal

ISSMP Exam topics

  • Domain 1: Leadership and organizational management
  • Domain 2: System lifecycle management
  • Domain 3: Risk management
  • Domain 4: Security operation
  • Domain 5: Emergency management
  • Domain 6: Legal, ethics and security compliance management

New adaptive online training for self-study

Adaptive online training courses from ISC2 are available for all three advanced certifications. These offer content based on each learner's progress, strengths and areas for improvement, providing candidates with a more targeted learning experience. With the launch of the courses for ISSAP, ISSEP and ISSMP, the rollout of adaptive training for all nine ISC2 certifications is complete. The updated training includes:

  • Personalized learning paths supported by AI
  • Real-time feedback and progress tracking
  • The official ISC2-E textbook
  • A new e-book with study questions
  • Access to the ISC2 Education Guarantee, which grants repeat course access if a candidate does not pass their exam within one year.

Further information on the exam descriptions, training packages and the first steps is available at: https://www.isc2.org/certifications

Data center operator Digital Realty receives SDEA "Gold+" certification

The world's first data center campus with the SDEA "Gold+" certificate for sustainable data centers is located in Switzerland. Following awards for the individual data centers, the entire Swiss campus is now "Gold+" certified.

Digital Realty received the SDEA "Gold+" certification for its data center campus in Zurich. (Image: Digital Realty)

Data center provider Digital Realty has announced that its 45MW campus in Glattbrugg - consisting of the ZUR1, ZUR2 and ZUR3 data centers - has been awarded the "Gold+" certificate by the Swiss Datacenter Efficiency Association (SDEA). This makes the campus in Glattbrugg the first data center location in the world to receive this prestigious award. This is a significant milestone for sustainable infrastructure and data center operations in Switzerland. This announcement follows an earlier milestone in which ZUR2 and ZUR3 received the "Gold+" certificate and ZUR1 the "Silver+" label. With ZUR1 now also "Gold+" certified, the entire campus in Glattbrugg has achieved the "Gold+" label. The three data centers underwent a strict certification process in which their energy efficiency and carbon footprint were assessed. ZUR1 was opened 25 years ago. Thanks to targeted technical upgrades, it still meets the latest technological standards today.

Strategic importance of sustainability

The SDEA certifies companies that meet particularly high sustainability standards over an extended period of time with 100 % measured and verified performance. The award of the "Gold+" certificate underlines Digital Realty's commitment to consistently reducing its environmental impact while providing a high-performance digital infrastructure. "Sustainability and energy efficiency are key drivers of innovation," explains Lex Coors, Chief Data Center Technology & Engineering Officer at Digital Realty. "In a world where resource scarcity, climate change and decarbonization pressures are becoming ever more present, sustainable solutions are becoming increasingly strategic."

Delighted with SDEA certification

Babak Falsafi, President of the SDEA, shares this assessment: "The fact that an entire campus has been awarded "Gold+" for the first time is exceptional proof of Digital Realty's leading role in terms of sustainability in data centers. Digital Realty is the first company ever to achieve Gold+ certification for all three data centers on a campus, setting a new benchmark for the entire industry to follow." Yves Zischek, Managing Director at Digital Realty in Switzerland, emphasizes: "This SDEA certification is an important milestone on our path to a sustainable future. We have been striving to play a pioneering role for over 25 years and will not rest on our laurels with the "Gold+" certificate. Especially in the age of AI, this is an important and strong signal."

Data centers have high energy requirements

With increasing digitalization, the demand for data storage capacity and computing power is constantly growing. From cloud computing and AI applications to everyday digital services, data centers play a crucial role in global connectivity. This development goes hand in hand with increasing energy consumption. AI-based workloads require up to 30 times more power1 than traditional server operations, making the importance of energy-efficient infrastructures ever more critical. Digital Realty is meeting these challenges with the consistent use of renewable energy and innovative colocation solutions, according to the company. Digital Realty's entire European portfolio - including its data centers in Switzerland - is powered by 100 % of renewable energy, according to the company.

Source: Digital Realty

Conference: "Chemical safety and explosion protection: what's missing?"

The conference "Chemical Safety and Explosion Protection: Where is it lacking?" on November 6, 2025 is dedicated to the growing challenges in dealing with hazardous substances in industry and commerce. In view of increasing legal requirements, technical developments and organizational changes, the proper and safe handling of chemicals is becoming an increasingly complex task for companies.

Various specialists will be giving talks on chemical safety and explosion protection on November 6, 2025. (Image: zVg / SAVE AG)

The professional handling of flammable, corrosive, toxic or explosive substances is essential in order to minimize risks to people, the environment and property. The legal requirements are extensive - but many questions arise in practice: How can extinguishing water retention be implemented efficiently? What should be done in the event of a chemical accident in the company? What are the consequences of banning or replacing certain substances? And how can know-how be retained despite staff changes in the company? All of this leads to challenges for chemical processing companies, project managers, enforcement authorities and insurers.

Existing know-how is often lost due to personnel changes, which can lead to new safety gaps. It is therefore imperative to regularly review the correct and proper handling of chemicals in the company as well as the safety measures and to adapt them to the new circumstances with sound knowledge. With a practical program, the presentations will get to the bottom of the above and other questions. Experts from the fields of enforcement, planning and application will provide up-to-date knowledge, highlight solutions and shed light on common weaknesses in day-to-day operations. Specific recommendations for adapting the safety system in companies where chemicals are used and where there is a risk of explosion are on the agenda.

The conference brings together the various players and promotes a well-founded exchange between specialists with similar questions and tasks.

Further information and registration: https://save.ch/event/chemikaliensicherheit-2025/

How drones are revolutionizing logistics

Drones are increasingly revolutionizing the warehouses of delivery companies, logistics firms, retail giants and furniture stores. Several thousand deliveries are already being made worldwide every day using these aircraft. But the areas of application go far beyond this.

A small drone that can be used in warehouses, for example. (Image: ZenaTech)

The global drone market is expected to grow more than tenfold by 2032, reaching a value of over 80 billion US dollars. A significant portion of this growth will come from the logistics and warehousing sectors, which, according to Fortune Business Insights, are expected to generate annual revenues of USD 31 billion by 2028 alone. Annual growth rates are estimated at over 24 %, driven by the increasing demand for faster and smarter delivery methods. Today, over 2,000 deliveries are already made by drone worldwide every day - a number that is expected to increase further once the legal framework and operational capabilities keep pace with innovation.

From food to first aid: broadening horizons

The scope of logistics goes far beyond e-commerce. In Rwanda and Ghana, the logistics company Zipline is already using drones to deliver blood supplies, vaccines and vital medicines to hard-to-reach communities. In Europe, similar projects are being tested on islands where conventional deliveries are costly and time-consuming.

And then there is the last mile - the crucial final stage from the distribution center to the customer. In densely populated cities, drones are proving to be a viable solution for reducing delivery times to just a few minutes. Amazon and several supermarket chains are testing autonomous air deliveries, while companies such as Ikea are using drones for internal logistics. In 16 of its stores, around 100 autonomous drones carry out after-hours stocktakes and transmit real-time inventory data to logistics teams - with no ladders and no downtime.

Scaling logistics with AI-supported drones

One company in this market is ZenaTech, a Nasdaq-listed small-cap company from Canada with a market capitalization of USD 125 million. The company's Drone-as-a-Service (DaaS) model removes the typical barriers to entry - no hardware purchases, pilot recruitment or certifications are required. Instead, customers subscribe to a turnkey solution that delivers operational efficiency at scale.

In the logistics sector, ZenaTech's AI-powered indoor drones automate inventory management by reading barcodes and capturing real-time data, eliminating the need for manual scanning and increasing throughput. The same platform is also used in other industries: in agriculture for precision spraying and field analysis, and in defense for border patrols, inspections and reconnaissance missions.

Drones of this type can also be used for military purposes. (Image: ZenaTech)

The company's growth is supported by both demand and investment. A second production facility is currently being built in Arizona, which is intended for the manufacture of drones for the US military. At the same time, ZenaTech is expanding internationally - most recently in Dubai, where the company is expanding its DaaS cleaning business. The market for drone cleaning alone is expected to reach a volume of 13 billion US dollars by 2030.

Source and further information: www.zenatech.com

 

Innovative drone technologies from Switzerland too

An innovative company ecosystem has also developed in Switzerland in the field of drone technology. Various companies, many of which are still young, are in the process of making a name for themselves internationally. For example, there are small unmanned helicopters with radar systems that can be used for surveillance or mapping tasks (Aeroscout) or transport drones for long distances (RigiTech). Swiss drone technology is also used for inspections of objects that are difficult to access (e.g. wind turbines, polluted interiors, industrial plants). Companies such as Wingtra, Voliro or Flyability have developed special systems that help to make maintenance tasks more efficient and cost-effective.

(red.)

Empathy gap: Finding the balance between AI and customer experience

While brands are excited about the efficiency gains in customer experience (CX) achieved through artificial intelligence (AI), there is a significant gap between the internal benefits and the service that consumers actually experience - an often disappointing result.

Empathy gap when using AI for the customer experience: the human factor is often missing. (Image: Depositphotos.com)

According to communications company Verizon's CX Annual Insights report, the future of customer experience (CX) is not just about implementing AI, but strategically integrating it to strengthen human relationships and address key customer issues.

Empathy gap revealed

The report, based on a survey of 5,000 consumers and 500 executives in seven countries, reveals a serious divide:

  • The human factor is still crucial: Overall, 88 % of consumers are satisfied with interactions that are mostly or entirely carried out by human employees. Only 60 % say the same about interactions with AI. This trend illustrates a fundamental insight: the efficiency of AI cannot replace the empathy and trust that a human conveys.
  • The biggest frustration: no direct communication with people: The most common cause of consumer frustration with automated interactions is the inability to speak or chat with a human agent when needed. Almost half of all consumers (47 %) cite this as the biggest problem. Businesses themselves are aware of this, with a similar percentage of executives stating that this is the most common complaint they receive in relation to AI-powered interactions.
  • The contradiction of personalization: Although personalization is one of the most important use cases for AI for brands, most consumers don't see the benefits. In fact, more consumers said that personalization has impacted their overall experience (30 %), than that it has improved it (26 %). An important factor is data privacy, with 65 % of executives stating that privacy regulations limit their ability to use AI for personalization. This point is particularly critical as 54 % of consumers state that their trust in the proper use of their personal data by companies has decreased.

"The future of CX is not about AI replacing humans, but about using AI to enhance human interactions," says Daniel Lawson, SVP Global Solutions at Verizon Business. "Companies that use AI to meet customer needs, empower their employees and improve personalization while respecting privacy will be the market leaders of tomorrow."

Closing the gap: Practical examples of AI that works

Companies are successfully using AI to improve the skills of their teams and optimize the customer experience instead of replacing human labor. The "Insights Report" gives an example of how an energy supply company was able to provide proactive support thanks to AI. During the COVID-19 lockdown, the company used AI and predictive analytics to identify middle-income households that might be struggling to pay their energy bills. This allowed the company to target households with personalized recommendations, for example by also pointing out government-organized energy assistance. In this way, the company demonstrated and proved not only customer proximity, but also that AI can solve concrete social challenges with a human-centered approach. The same company also uses AI to assist advisors, for example to process calls more efficiently. This involves providing them with the right data at the right time and consolidating calls, thereby reducing the burden on employees. This is in line with the report's finding that companies are now prioritizing investments in improving the customer experience through human employees and AI equally.

Source: Verizon

German industry survey: cyber security in production has room for improvement

Less than half of manufacturing companies in Germany have clear organizational structures for IT security with a dedicated security officer. SMEs in our northern neighboring country are increasingly relying on external cyber security partners.

Medium-sized production companies in Germany have caught up in terms of cyber security, but there is still room for improvement. They often rely on external service providers. (Image: Depositphotos.com)

Production plants and their control systems are among the most sensitive areas in the manufacturing industry. These systems are increasingly networked for greater efficiency and profitability, making them an automatic target for cyber criminals. In many cases, a cyberattack does not start directly with the OT systems, but via gaps in the traditional IT. From there, the attackers gradually gain access to other IT and control systems in order to attack the most sensitive areas of production. Their goal: maximum disruption to operations, theft and encryption of production and operationally relevant data as well as blackmail.

Companies have recognized risks

IT security company Sophos conducted a targeted survey of industrial companies in Germany to find out the status of attack risks and defenses. The results show a positive development: many companies have recognized this danger and are setting up their organization accordingly. Responsibilities are being more clearly defined and cooperation between IT and production is developing well for the most part. SMEs in particular are increasingly relying on support from external security partners.

Almost every second company has its own security officer

The days when cyber security was a sideline are clearly over in many companies. 47.9% of the companies surveyed have now appointed a permanent person responsible for IT security. A further 33.6 percent combine this task with other areas - a model that is mainly practiced by smaller companies where resources are scarcer.

SMEs strengthen themselves with external security partners

The way smaller companies deal with cyber security is particularly interesting. One in four companies with fewer than 250 employees (25 percent) now work with specialized external IT security partners. In large companies with over 1,000 employees, however, this figure is only 11.1 percent; most of these companies have set up their own specialist departments.

This development shows that medium-sized companies are countering the lower availability of resources (compared to large companies) with pragmatic solutions to a complex problem: Instead of looking for and building up security experts themselves, they are turning to specialized service providers who already have the necessary experience and infrastructure.

IT has the leading role in production security

A clear picture emerges regarding the distribution of responsibilities in the companies: In seven out of ten companies (70.1 percent), the IT department is responsible for the IT security of production facilities. Production itself only bears the main responsibility in 19 percent of cases. This distribution clearly reflects the fact that production systems are now part of networked IT structures that need to be protected holistically.

 Exchange, coordination, joint task

Coordination between departments also appears to be common practice in many companies. In 68.7 percent of companies, IT and production regularly talk to each other about security issues. Only 4.3 percent do not coordinate between the two departments at all. This very low percentage makes it clear that most companies have apparently internalized the fact that robust cyber security can only be achieved as a joint task.

Suppliers are also increasingly part of the security strategy

A look at the supply chain reveals another dynamic relevant to cyber security: more than half of companies (57.3%) now impose contractual requirements on the cyber security of their partners. Almost two thirds also check their IT security regularly, and a further 19.4 percent at least occasionally. These are all crucial measures, as vulnerabilities at suppliers are among the riskiest points of attack in cyberattacks.

"A clear assignment of responsibilities is the foundation for effective protection in production," says Michael Veit, security expert at Sophos. "Where IT and production work hand in hand, companies can react much faster in the event of disruptions or attacks. Medium-sized companies in particular benefit from clear structures - whether with their own specialists or with the help of external partners. Anyone who also keeps an eye on their supply chain closes one of the most dangerous gaps."

A solid basis has been created

The survey clearly shows that German production companies have made significant organizational progress in terms of cyber security. Clear responsibilities, well-functioning cooperation and the involvement of suppliers create a solid basis for more protection in production. SMEs in particular show that this is possible even without large internal teams - if the network of partners is right.

Or: not everyone has to reinvent the wheel. If you get the right support, you can build effective protection even with limited resources.

Source: www.sophos.de

Is training against phishing still useful in the age of AI?

The study "Pwning User Phishing Training Through Scientific Lure Crafting" by researchers from the University of Chicago, the University of California San Diego (UCSD) and UCSD Health questions the benefits of training against phishing and shows only a small benefit. Richard Werner, Security Advisor at Trend Micro, comments on this finding.

Cybersecurity: Training is useful, but in the event of an incident, the IT security infrastructure must perform its protective function. (Image: Dan Nelson / Unsplash.com)

We have to stop shifting the blame. Even if it is unpopular, protecting the company remains the responsibility of the IT security department. Other employees can only play a supporting role by recognizing dangerous emails in good time. This is not a matter of course and will happen less and less in the future - despite training, as a recent study shows. IT security must also work if a person causes an accident, just like in a car. Because if there is an accident and humans are no longer able to intervene, automatic systems such as seat belts or airbags take on the important task of reducing the impact of the damage, just like in a car.

What does that mean in the face of AI?

AIs, especially LLMs (Large Language Models), are optimized for machine-human communication. Not only can they string words together in a meaningful way, they can also imitate writing and speaking styles. Using so-called "prompt engineering", i.e. programming by entering commands, practically any user can tell the machine how to act. This makes it increasingly difficult for victims to tell the difference between normal and fraudulent communication, while AI also reduces costs and increases productivity.

In the area of fraud, the greatest effort is put into targeted attacks. A perpetrator engages with his victim and tries to create an irresistible attack from available information. With spear phishing, we are not talking about accidents, because they do not happen by chance. They are attacks in the broader sense, and their success rate, according to another studyis over 50 percent, even among purely human experts. This type of attack has rarely occurred in reality. This is because the amount of work required is considerable. But what happens when AI takes over? The evaluation of the data and the creation of an attack profile would then be automated. According to the study, this would have led to reasonable results in 88 percent of cases. The content generated can no longer be distinguished from normal communication.

The faster and more effective AI solutions become, the more frequently they will also be used in cybercrime, and the less often humans will recognize this as a security component - regardless of the level of training.

What can we do next?

Technology has always been the counterpart to human error and is designed to prevent it or at least limit the resulting damage. In IT security, the building blocks of Zero Trust, Cyber Risk Exposure Management (CREM) and Detection and Response are well known. These building blocks reduce the risk of occurrence and the impact of incidents. For these technologies and strategies, it is irrelevant where the attack comes from and why it could not be averted. Metaphorically speaking, it is the seat belts and airbags that guarantee survival in the event of damage. If a link-clicking employee is responsible for a company being fully encrypted, then it is not the employee who is the problem, but the company's own security infrastructure.

Conclusion: Is training necessary? When do they make sense?

Training is expensive. Not only the cost of introducing the processes, but also the workload of each individual employee must be taken into account. It is therefore legitimate to question the added value. This lies in reducing the probability of cyberattacks occurring. Training has always been an important part of security strategies. But like everything else in security, this too loses its effectiveness over time. However, this does not mean that this component immediately becomes pointless. As long as IT security is stretched to capacity by the sheer number of individual events that need to be checked, training is needed to reduce these.

Training against phishing is particularly important when it comes to the fraud itself and recognizing red flags such as requesting money or access to company data. Employees also need to understand why they need to follow security processes, such as multi-factor authentication when accessing data, and how attackers try to get past them. Yes, training remains important. But they are not an excuse for security incidents. The stigma of blame if an employee has not recognized it is not helpful, because it will happen more often in the future. Companies should take precautions to ensure that even if the worst does happen, the impact remains limited.

Source: Trend Micro

Rodolphe Eurin appointed new CEO of Schulthess Klinik

Rodolphe Eurin will become the new CEO and Director of Schulthess Klinik and the Wilhelm Schulthess Foundation on November 1, 2025. He succeeds Andrea Rytz. Schulthess Klinik is one of the leading orthopaedic clinics in Europe with around 1200 employees.

Rodolphe Eurin will be the new CEO of Schulthess Klinik from November 1, 2025. (Image: zVg / Schulthess Klinik)

Rodolphe Eurin, born in 1975, completed his studies in physics (BSc.) and as an operations and production engineer (MSc.) at the Swiss Federal Institute of Technology in Zurich (ETHZ) and holds an MBA from IMD in Lausanne. Rodolphe Eurin has extensive experience in the healthcare sector. He worked in the pharmaceutical industry for F. Hoffmann-La Roche and later in medical technology for Medtronic as part of the EMEA management team of the spine surgery business unit before moving into the world of hospitals and healthcare. Rodolphe Eurin was COO of a group of private clinics before becoming CEO of Hôpital de La Tour in Geneva in 2018, a position he held until the end of 2024. Since the beginning of 2025, he has been an independent Board member and consultant. He is passionate about patient-centric care and optimizing medical outcomes as differentiating factors for the future of healthcare institutions.

The Chairman of the Board of Trustees of the Wilhelm Schulthess Foundation, Peter E. Bodmer, says: "I am convinced that with Rudolphe Eurin, a proven expert will lead Schulthess Klinik successfully into the future. I would like to thank the outgoing CEO Andrea Rytz for her outstanding services to Schulthess Klinik and the Wilhelm Schulthess Foundation. She is handing over to her successor a successful company with an excellent national and international reputation." And Rodolphe Eurin says: "I am looking forward to shaping the future of Schulthess Klinik together with the management, medical staff and all employees. The clear focus on outcome research and the resulting outstanding results are key success factors for a healthcare institution and have long inspired my admiration for Schulthess Klinik. It is a great honor to lead an institution that enables patients to regain the best possible quality of life, while at the same time being committed to education and research for medical excellence in orthopaedics and thus also contributing to the sustainability of the healthcare system."

Source: Schulthess Clinic