Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: DORA is coming into effect January 17th, are you ready? 🛡️ Security trends 2025 ⭐️

Published at

17:04

Open digest

🛡️ Cyberdigest: No time to waste, join us for the first webinars of the year 2025! ➡️💻 Impactful cybersecurity events of 2024 📰

Published at

17:03

Open digest

🛡️ Cyberdigest: Happy new year 2025! ⭐️ Evolving Cyber Sec Consulting 🛡️ Keep defences up during holidays 🎄

Published at

17:00

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

AI Act, cyber risks and breaches: Cyberday product and news roundup 1/2024 🛡️

In January's summary, development themes include reporting updates, improved report sharing and upgraded Academy. On the news side talk about AI Act, cyber risks and breaches.

30.1.2024

10 most important tasks for a CISO and tips for being successful

This article provides an insight into the main responsibilities of a CISO, from implementing security principles to fostering collaboration. It also presents valuable tips for successful performance, emphasizing constant learning as a key ingredient.

24.1.2024

The Human Firewall Effect: Tips for Securing Your Organization from Within

This blog post emphasizes the critical role employees play in bolstering an organization's cyber security. It discusses developing clear guidelines, employee training, and monitoring progress to create a strong human firewall.

19.1.2024

Encryption, RaaS, supply chain attacks: Monthly Cyberday product and news roundup 12/2023 🛡️

In December's summary, development themes include UI updates and information security statements. On the news side talk about encryption, RaaS and supply chain attacks.

15.12.2023

NIS2: Working towards compliance with Cyberday (3/3)

✈️ You want to lift your cyber security management to a new level & get NIS2 compliant with a smart tool like Cyberday? In this post you'll learn how your organization can achieve NIS2 compliance in a smart way by building an own agile ISMS.

23.8.2023

NIS2: Who's in the scope and what security measures are required? (part 2/3)

In this post you'll learn about what industries are affected by NIS2, security requirements the directive sets, and the available enforcement methods if an organization is not compliant.

23.8.2023

NIS2: Get familiar with the EU's new cyber security directive (part 1/3)

Learn about the background and reasons behind the EU's new Network and Information Security 2 (NIS2) Directive. How does it affect your company and how should you react to be compliant?

1.8.2023

SOC 2: Working towards compliance

With the help of SOC 2, organisations can provide proof of effectively implemented controls and the use of best practices to protect the data to their customers and stakeholders, which may help to build trust.

31.7.2023

News articles

Get weekly news? Subscribe now >>

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

Volt Typhoon is a state-sponsored actor, active since mid-2021 that targets critical infrastructure in the US. ➡️ This blog from MS describes their tactics for achieving / maintaining unauthorized access to target networks. #cybersecurity

Go to article at

OpenAI Leaders Call For Regulation To Prevent AI Destroying Humanity

ChatGPT founders call for a regulator to: ⚖️ place restrictions on AI 🔎 audit AI systems ✔️ test for compliance with safety standards in order to combat e.g. lock-in effects and becoming completely dependent on machines. #cybersecurity

Go to article at

Shedding light on AceCryptor and its operation

AceCryptor has been around since 2016 and operates as the cryptor-as-a-service behind tens of #malware families ➡️ This blog by ESET researchers goes through some technical details about the prevalent cryptor.

Go to article at

US Department of Transportation Suffered a Massive Security Breach Impacting 237,000 Federal Employees

⚠️ US Department of Transportation had a #cybersecurity breach exposing personal data of 114k current + 123k former employees. Breach hit staff administration systems (e.g. transit benefits), not the most critical transport safety systems.

Go to article at

5 useful search engines for internet‑connected devices and services

Tools for #cybersecurity pros to monitor connected devices: 🤖 Shodan gets detailed device info (IP, OS, used software, open ports) 🦾 Censys adds additional security info (e.g. vulnerabilities, SSL certificates) Continue the list... >>

Go to article at

KeePass vulnerability allows attackers to access the master password

KeePass is free, open source pw manager. Researcher recently reported a related #vulnerability: ⚠️ "In KeePass 2.x before 2.54, you can recover the cleartext master password from a memory dump, even when workspace is locked / not running."

Go to article at

4 Countries Join NATO Cyber Defense Center

🌐 NATO #cybersecurity center just turned 15 and announced new members: Ukraine, Ireland, Japan and Iceland. CCDCOE now has 39 members, including some non-NATO countries. Center conducts e.g. large-scale cybersec research and exercices.

Go to article at

PharMerica breach impacts almost 6 million people

🚩 US pharmacy giant notified 5.8m customers of a breach where personal data was stolen (e.g. medication lists). #Ransomware group "Money Message" claimed responsibility and has published parts of the stolen data on their leak site.

Go to article at

Why more transparency around cyber attacks is a good thing for everyone

NCSC: Particularly #ransomware attacks going unreported is a big concern Some related myths that are NOT TRUE: ❌ If there's no evidence of data theft, you don't need to report ❌ If you've got good offline backups, you're OK

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial