On August 24, 2026, Switzerland's National Cyber Security Centre (NCSC) published its Semi-Annual Report 2026/I covering January through June 2026.

The NCSC recorded 27,128 voluntary cyberincident reports and 200 notifications subject to mandatory reporting, with public administration and IT/telecommunications among the most represented sectors.

Fraud, phishing and credential theft remain significant threats, while attackers are increasingly using artificial intelligence to create personalized and credible fraudulent content.

The accompanying federal communication reports that fraudulent calls impersonating public authorities fell by more than 75% in July after the caller-ID anti-spoofing requirement was extended to mobile numbers on July 1, 2026.

The report also highlights Microsoft 365 phishing, compromised open-source software, credential theft and 79 ransomware cases during the reporting period.

This publication is an implementation and threat-landscape update: it does not itself introduce new product certification, spectrum, import, technical-standard or labeling obligations.

Impact assessment: Low.

The publication is an informational cybersecurity and implementation report rather than a new binding product rule.

Key reasons: it reports incident statistics, threat trends and observed effects of caller-ID measures already in force.

Who is affected?

Critical-infrastructure operators, telecom providers, enterprises, public bodies and security teams.

Conclusion:

Organizations should use the findings to refine cyber-risk controls, but no new product approval, spectrum, import or labeling action is created by this report.