IoT devices can be misused to a large extent for cyber attacks, successful blackmail attempts (e.g. fake sextortion) as well as money transfer fraud with Office 365 access data and the main topic "Dealing with purchased risks in hardware and software". The 28th semi-annual report of the Reporting and Analysis Centre for Information Assurance (MELANI) deals with the most important cyber incidents of the second half of 2018 in Switzerland and abroad.