Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Top 7 information security standards, frameworks and laws explained

Many information security frameworks are available to help organizations build their own security plans. This article provides key information about some of the most popular information security frameworks.

article

4.3.2024

ISO 27001 and NIS2: Understanding their Connection

Learn how the ISO 27001 and the NIS2 are "connected" and why they are brought up together pretty often. Understand their differences and synergy with the help of this blog post.

article

1.3.2024

Guide to Incident Detection and Reporting: Prepared for the Worst

In this guide you'll learn to navigate the incident detection and reporting process, explore various mechanisms, understand reporting, documentation, and derive crucial lessons. We also glance at other ingredients for successful incident management.

article

22.2.2024

NIS2 Overview: History, key contents and significance for top management

Get an overview of NIS2's main contents and understand how it makes top management clearly responsible for organization's information security efforts.

article

16.2.2024

Best Practices and Common Challenges of ISMS Implementation

No matter if you are an IT professional, a cyber security expert, or in a management role, this post will provide you with valuable insights into the best practices for a successful ISMS implementation and how to navigate common challenges.

article

14.2.2024

ISMS Guide: Top 10 ISMS Implementation Benefits

What is an ISMS and why does your organization benefit from its implementation in the long run? This blog post will give you a short guide about all the basics you need to know about an ISMS and its top 10 benefits.

article

9.2.2024

Intro to Incident Management: Definitions, benefits and best practices

Learn how an incident management process improves communication, documentation, and continuous improvement for IT organisations.

article

6.2.2024

5 Efficient Ways for Involving People in Your Security Work

Discover how teamwork, education, reporting, and risk assessments empower ISMS. Explore 5 ways to engage people for a secure, collaborative digital space.

article

1.2.2024

CSAF Is the Future of Vulnerability Management

Today, most security advisories use custom format and are not machine-readable. 👉 New CSAF 2.0 enables #vulnerability management automation and better communication by standardizing security advisories to a structured JSON format.

Go to article at
16.12.2022

Top tips for security‑ and privacy‑enhancing holiday gifts

#Cybersecurity gifts: 🔑 2FA hardware-based key: No physical key, no stealing your accounts 💻 Laptop privacy screen: No shoulder surfing 🔐 Password manager: No credential stuffing 🛡️ VPN: No spying by ISPs, hackers or advertisers

Go to article at
16.12.2022

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

InfraGard is an FBI program for #cybersecurity threat info sharing with private sector, designed for key industry people. ⚠️ Now user db for InfraGard was breached, incl. names and contact information for tens of thousands of members.

Go to article at
16.12.2022

New Ransom Payment Schemes Target Executives, Telemedicine

New devious #ransomware schemes: 🏥 Targeting healthcare web consultations by sending them booby-trapped medical records for the “patient” 📥 Carefully "forging" inboxes of company execs to imply they were involved in insider trading

Go to article at
9.12.2022

Hacking cars remotely with just their VIN

#Cybersecurity researcher finds that your car's (e.g. Hyundai, Nissan, Honda) mobile app may allow hackers to remotely unlock, turn on the engine or honk the horn. ➡️ See details of exploiting vulnerabilities to bypass authorisation

Go to article at
9.12.2022

Fantasy – a new Agrius wiper deployed through a supply‑chain attack

⚠️ Agrius is an Iran-aligned #cybercrime group, targeting victims e.g. in Israel and the UAE. They launched a supply-chain attack abusing Israeli software to deploy a wiper malware to numerous customer organizations. Attack details >>

Go to article at
9.12.2022

SIM swapper sent to prison for 2FA cryptocurrency heist of over $20m

Florida man, part of #cybercrime gang, stole 20 M$ from crypto wallets utilizing SIM swapping, sentenced to 18mo and to pay back earnings. ⚠️ SIM-swap problems are why e.g. many authorities no longer recommend using SMS-based 2FA.

Go to article at
9.12.2022

Gangs of cybercriminals are expanding across Africa, investigators say

#Cybercrime growing fast in Africa, driven by internet use growth and opportunities due to economic crisis. 🚨 In Nov. police seized 70 members & 50 properties linked to Black Axe gang operating in South Africa, Nigeria and Ivory Coast.

Go to article at
2.12.2022

Black Basta Gang Deploys Qakbot Malware in Aggressive Cyber Campaign

Qakbot #malware now used actively to attack companies. Starts with phishing, ends in ransomware. ⚠️ "Attacks are swift, with ransomware deployed in less than half a day after obtaining domain admin privileges in under two hours."

Go to article at
2.12.2022