Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Build your NIS2 measures for Business Continuity and Backups with ISO 27001

This post offers insight on complying with NIS2's continuity and backup requirements using ISO 27001's best practices. It guides you through continuity planning, backup processes, challenges, and achieving compliance effectively.

article

12.4.2024

Understanding HR Security Basics for ISO 27001 & NIS2 Compliance

Discover how the crucial role of HR in information security not only shapes the corporate security culture, but also steers the organization towards ISO 27001 and NIS2 compliance, ensuring secure handling of information assets and much more.

article

5.4.2024

Access Control & MFA (NIS2 21.2): Build A Solid Foundation with ISO 27001 Best Practices

What are the requirements for access control and MFA in NIS2 and ISO 27001 and how can they be implemented successfully? Learn more about the controls, requirements, best practices and how to overcome potential challenges in this blog post.

article

4.4.2024

Potential Struggles IT Companies might Encounter with Incident Identification and Reporting Today

The complexities of incident identification and reporting in IT, touching on coordination problems, tool inadequacies, and process deficiencies. It explores modern challenges like cyber threats and alert fatigue, as well as the cognitive gap.

article

28.3.2024

Information Security Risk Management: A Step-by-step Guide to a Clear Process

This post offers a comprehensive guide on managing information security risks, from pre-steps like asset identification to evaluation, treatment and monitoring. A crucial aspect given the surge of cyber vulnerabilities amid increasing tech advances.

article

21.3.2024

Ransomware, AI Act 101, NIST CSF 2.0: Cyberday product and news round up 3/2024 🛡️

In the March digest, development themes include new frameworks, risk management improvements and a new visual view for documentation cards. The news features Information Security Trailblazers, data breaches and AI Act 101.

article

21.3.2024

Empowering Employees: The Keystone in Incident Detection and Reporting

Employees are vital for detecting and reporting cyber threats and bolstering security. Proper training fosters a resilient culture, ensuring timely responses and safeguarding against breaches.

article

15.3.2024

NIS2 Incident Reporting Requirements and related ISO 27001 Best Practices

This post outlines NIS2 incident reporting and further describes ISO 27001 best practices, and their application in crafting successful incident reporting processes for your organization.

article

8.3.2024

Researchers Warn of New Attack that can Unlock and Start Tesla Model Y in Seconds

💡 Researcher discovered an NFC relay attack #vulnerability, by which anyone w/ physical access to a Tesla Model Y can unlock and steal it in seconds. You need 2 thieves, one at the vehicle, one close to the owner. Details in article >>

Go to article at
16.9.2022

Say Hello to Crazy Thin ‘Deep Insert’ ATM Skimmers

💳 New #cybercrime tech: super-thin skimming devices, designed to fit inside an ATM's card slot. With these & hidden pinhole camers, crooks are after the magnetic stripe data and 4-digit PIN to clone payment cards.

Go to article at
16.9.2022

The Cost of a Data Breach for Government Agencies

💸 IBM: the cost of a #cyberattack on public administration is €2.06M. Internationally, these attacks are reported monthly. A large number of employees and varying security awareness increase attractiveness for cybercriminals.

Go to article at
9.9.2022

In-app browser security risks, and what to do about them

When you click a link to webpage inside an app (e.g. FB, TikTok), you don't get to your default browser - you stay in an embedded version. These in-app browsers have #privacy issues, they e.g. inject JS code so host apps track what you do.

Go to article at
9.9.2022

WhatsApp Scams in 2022: What to Look out for

WhatsApp has 2B active users. It's a growing medium in cybercrime too, as people have gradually become aware of email / SMS #phishing. 2000% increase in WhatsApp scams reported this year! 📈 Article lists most popular scam types >>

Go to article at
9.9.2022

Cyberattack brings down InterContinental Hotels' booking systems

🏨 17 brand hotel chain IHG (e.g. Holiday Inn) reservation systems down due to #cyberattack. Hotel industry is a common target for cybercrimes, e.g. due to data contained in reservations, payment card data and reward point systems.

Go to article at
9.9.2022

Facebook Engineers Admit They Don't Know What They Do With Your Data

A doc leaked earlier that said FB has no idea where user data goes and what they do with it. Now 2 veteran engineers confirmed similar things in court hearing. ⚠️ "data may be in 55 FB subsystems" ⚠️ "code is its own design doc" #privacy

Go to article at
9.9.2022

New Cybersecurity Regulations Are Coming. Here’s How to Prepare.

Governments are feeling the need to “do something”, to battle growing impact of #cyberattack's. In the US, new rules are pending by e.g. FTC and CISA. These may require e.g. reporting of cyber incidents, not just personal data breaches.

Go to article at
2.9.2022

How 1-Time Passcodes Became a Corporate Liability

Large firms are falling prey to #phishing that goes around MFA - using text messages to steal employee's credentials and one-time passcodes. ✅ Many are now making the change from phishable forms of MFA to e.g. physical security keys.

Go to article at
2.9.2022