RoguePlanet: Microsoft Defender Zero-Day Enables SYSTEM Access
New Microsoft Defender zero-day vulnerability enables SYSTEM-level privilege escalation on modern Windows systems.
About us
What we do
The independent, privately owned Swiss company CRYPTRON Security GmbH was founded by Stefan Mettler to support and advise customers on complex IT security issues.
Furthermore CRYPTRON Security GmbH sees itself as a think tank respectively Hacking Research Collective & Security Consulting Think Tank.
Company founder Stefan Mettler has been working in the field of IT security for many years. He has already assisted various national and international companies, authorities and institutions in analyzing and improving the level of security. He studied information security at the Lucerne University of Applied Sciences and has a large number of industry-recognized certifications. His areas of expertise include the verification of complex web applications, network analysis, security research on an open source basis and specific penetration tests of complex ICT environments, as well as conceptual support for extensive SAP or cloud projects.
Founder & Chief Executive Officer (CEO)
The imparting of knowledge about specially tailored workshops, lectures based on his many years of practical experience belong to his passions. In addition, Stefan Mettler is also a lecturer in Switzerland and teaches at the level of FH and in basic education several modules of information security.
Stefan Mettler has been advising companies and groups from various sectors and sectors, for example from the banking environment, pharmaceuticals, telecommunications, insurance companies, for more than a decade.
Stefan Mettler regularly presents research results at recognised security conferences and usually demonstrates the results in the form of a "live hack". In addition, Stefan Mettler is often featured in national and international media with his expertise and serves as a contact person for expert articles and interviews.
Dirty Frag: Unpatched Linux kernel vulnerability allows root access
A new, unpatched local privilege escalation vulnerability in the Linux kernel allows unprivileged local attackers to gain root privileges on almost all widely used
Linux distributions – including Ubuntu 24.04.4, RHEL 10.1, Fedora 44 and others. A working proof-of-concept is already publicly available. Immediate action is strongly recommended.
Security Advisory - CVE-2025-7426
Critical vulnerabilities were discovered in the MINOVA TTA industry software (CVE-2025-7426) as part of a security check. The unprotected availability of debug services is particularly risky, exposing sensitive FTP access data and information about software modules.
Infrastructure as Code (IaC)
In today’s fast-paced IT world, companies are constantly looking for ways to manage their infrastructure more efficiently and securely. Infrastructure as Code (IaC) has emerged as a revolutionary approach that enables defining and managing infrastructure resources through code.
Cyber Crime Event in Aadorf 2024
Experience an exciting evening with a fascinating presentation on cybercrime with Stefan Mettler from CRYPTRON Security GmbH. Register today.
EN - company anniversary
Dear customers,
We would like to share a special moment with you today as our company celebrates its 7th anniversary!
It is a time of joy and gratitude that we would like to share with you.
EN - Sentinel ATT&CK
20 July 2022
Sentinel ATT&CK aims to simplify the rapid deployment of a threat hunting capability that leverages Sysmon and MITRE ATT&CK Matrix on Azure Sentinel.
EN - How do you protect your company from cyber attacks?
Cyber attacks on the economy, administration and health care are steadily increasing. Recently, online blackmailers have put banks, hospitals, trading companies and municipalities under pressure. But what happens if they paralyse entire industries?
EN - CRYPTRON Security GmbH switches to WebP image format
WebP is a modern image format that provides excellent lossless and lossy compression for images on the web. With WebP, webmasters and web developers can create smaller, richer images that make the web faster.
EN - MITRE ATT&CK Framework
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
EN - OWASP Juice Shop insecure web application
OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications.
EN - Radio interview on cyber crime with SRF Regionaljournal Ostschweiz
Stefan Mettler, CEO of CRYPTRON Security GmbH in a radio interview on cyber crime with SRF Regionaljournal Ostschweiz. (Edition of May 25, 2021)
EN - SUCCESS STORY
IT security check of modern coffee machines
(IoT Security)
As part of an IT security audit, the CRYPTRON Security Team was commissioned by the Zurich-based company Rex-Royal AG to check the servers and API interfaces for collaboration with the smart coffee machines and the Rex-Royal Cloud for the OWASP Top 10 Web Application vulnerabilities.
EN - Cyberattacks in the Network
Stefan Mettler, Managing Director of CRYPTRON Security GmbH in an interview on the globally advancing digitalization process in the Saturday edition of the Elgger Aadorfer Zeitung.
EN - Impulse generator for Switzerland and Europe. Article about CRYPTRON Security GmbH in the Handelszeitung.
The magazine of BILANZ, Handelszeitung and Le Temps nominated the 25 people for Switzerland and Europe.
EN - Home Office
Things you should never do with the computer
Your security and IT teams know all about the dangers of cybercrime , phishing, business email compromise and malware, and the importance of practicing good cyber hygiene. But how well do the rest of the employees in an organization know and practice the basics of working safely with new technologies? How well known and prevalent are basic security practices in your organization?
EN - Increased security risk from ransomware and phishing
Fraudsters are currently sending blackmail emails threatening to infect the recipient and his family with the new corona virus.
EN - "Hack me if you can" - SRF Input Story
SRF "Input" uses a hack experiment to show how one person's negligence can be another person's undoing.
EN - Hacker visited FDP Aadorf
A professional hacker visited the FDP Aadorf.
Article in the Elgger Zeitung - an official publication for the municipalities of Elgg and Hagenbuch - local newspaper for the municipality of Aadorf.
EN - The good Hacker - Interview with Handelszeitung
Stefan Mettler, CEO of CRYPTRON Security GmbH in an interview with Handelszeitung. The interview is available in the print edition No. 40 of October 5, 2017.