Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: DORA is coming into effect January 17th, are you ready? 🛡️ Security trends 2025 ⭐️

Published at

17:04

Open digest

🛡️ Cyberdigest: No time to waste, join us for the first webinars of the year 2025! ➡️💻 Impactful cybersecurity events of 2024 📰

Published at

17:03

Open digest

🛡️ Cyberdigest: Happy new year 2025! ⭐️ Evolving Cyber Sec Consulting 🛡️ Keep defences up during holidays 🎄

Published at

17:00

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

Top 7 information security standards, frameworks and laws explained

Many information security frameworks are available to help organizations build their own security plans. This article provides key information about some of the most popular information security frameworks.

4.3.2024

ISO 27001 and NIS2: Understanding their Connection

Learn how the ISO 27001 and the NIS2 are "connected" and why they are brought up together pretty often. Understand their differences and synergy with the help of this blog post.

1.3.2024

Guide to Incident Detection and Reporting: Prepared for the Worst

In this guide you'll learn to navigate the incident detection and reporting process, explore various mechanisms, understand reporting, documentation, and derive crucial lessons. We also glance at other ingredients for successful incident management.

22.2.2024

NIS2 Overview: History, key contents and significance for top management

Get an overview of NIS2's main contents and understand how it makes top management clearly responsible for organization's information security efforts.

16.2.2024

Best Practices and Common Challenges of ISMS Implementation

No matter if you are an IT professional, a cyber security expert, or in a management role, this post will provide you with valuable insights into the best practices for a successful ISMS implementation and how to navigate common challenges.

14.2.2024

ISMS Guide: Top 10 ISMS Implementation Benefits

What is an ISMS and why does your organization benefit from its implementation in the long run? This blog post will give you a short guide about all the basics you need to know about an ISMS and its top 10 benefits.

9.2.2024

Intro to Incident Management: Definitions, benefits and best practices

Learn how an incident management process improves communication, documentation, and continuous improvement for IT organisations.

6.2.2024

5 Efficient Ways for Involving People in Your Security Work

Discover how teamwork, education, reporting, and risk assessments empower ISMS. Explore 5 ways to engage people for a secure, collaborative digital space.

1.2.2024

News articles

Get weekly news? Subscribe now >>

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

Volt Typhoon is a state-sponsored actor, active since mid-2021 that targets critical infrastructure in the US. ➡️ This blog from MS describes their tactics for achieving / maintaining unauthorized access to target networks. #cybersecurity

Go to article at

OpenAI Leaders Call For Regulation To Prevent AI Destroying Humanity

ChatGPT founders call for a regulator to: ⚖️ place restrictions on AI 🔎 audit AI systems ✔️ test for compliance with safety standards in order to combat e.g. lock-in effects and becoming completely dependent on machines. #cybersecurity

Go to article at

Shedding light on AceCryptor and its operation

AceCryptor has been around since 2016 and operates as the cryptor-as-a-service behind tens of #malware families ➡️ This blog by ESET researchers goes through some technical details about the prevalent cryptor.

Go to article at

US Department of Transportation Suffered a Massive Security Breach Impacting 237,000 Federal Employees

⚠️ US Department of Transportation had a #cybersecurity breach exposing personal data of 114k current + 123k former employees. Breach hit staff administration systems (e.g. transit benefits), not the most critical transport safety systems.

Go to article at

5 useful search engines for internet‑connected devices and services

Tools for #cybersecurity pros to monitor connected devices: 🤖 Shodan gets detailed device info (IP, OS, used software, open ports) 🦾 Censys adds additional security info (e.g. vulnerabilities, SSL certificates) Continue the list... >>

Go to article at

KeePass vulnerability allows attackers to access the master password

KeePass is free, open source pw manager. Researcher recently reported a related #vulnerability: ⚠️ "In KeePass 2.x before 2.54, you can recover the cleartext master password from a memory dump, even when workspace is locked / not running."

Go to article at

4 Countries Join NATO Cyber Defense Center

🌐 NATO #cybersecurity center just turned 15 and announced new members: Ukraine, Ireland, Japan and Iceland. CCDCOE now has 39 members, including some non-NATO countries. Center conducts e.g. large-scale cybersec research and exercices.

Go to article at

PharMerica breach impacts almost 6 million people

🚩 US pharmacy giant notified 5.8m customers of a breach where personal data was stolen (e.g. medication lists). #Ransomware group "Money Message" claimed responsibility and has published parts of the stolen data on their leak site.

Go to article at

Why more transparency around cyber attacks is a good thing for everyone

NCSC: Particularly #ransomware attacks going unreported is a big concern Some related myths that are NOT TRUE: ❌ If there's no evidence of data theft, you don't need to report ❌ If you've got good offline backups, you're OK

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial