Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Spreadsheet vs. ISMS tool - top 10 reasons why a tool is better than the traditional way

Discover the top 10 reasons why agile tools outperform traditional spreadsheets in managing cyber security compliance, from centralized management to continuous improvement.

article

22.8.2024

ISMS Essentials: Mastering a Data System Inventory for Your Organization

This post provides essential insights for maintaining a data system inventory within your organization's ISMS, detailing key processes, asset types, and tackling common challenges.

article

15.8.2024

Incident Detection: Building, Nurturing, and Continuously Improving a Proactive Environment

Shift from reactive to proactive incident detection. Use advanced tools, continuous learning, and customised strategies to anticipate and prevent issues. Focus on constant improvement and innovation to boost security and resilience.

article

15.8.2024

ISO 27001 and ISO 9001: Differences, how they work together and benefits of combining

Learn about the synergy between ISO 27001 and ISO 9001. Learn how integrating these standards enhances information security, quality management, and overall operational efficiency, using case examples and actionable insights.

article

6.6.2024

NIS2 Compliance: Top 5 Reasons for the Manufacturing Sector

The article highlights the critical importance for manufacturers to comply with NIS2 regulations to safeguard their operations and infrastructure from cyber threats.

article

31.5.2024

Cannes Hospital data breach, the impact of AI and NIS2 evolution: the Cyberday product and news round-up 5/2024 🛡️

May's Product and News Update presents the new monthly ISMS reports as well as the Metrics page. Other topics include Cyberday's new framework DORA and recent news around the world.

article

17.5.2024

6 ways to assess security work effectiveness

Evaluating the effectiveness of your cybersecurity involves examining the adequacy of your existing security measures. This process helps you identify your current security status and determine the necessary actions to enhance and fortify.

article

3.5.2024

Best Practices from ISO 27001 for Secure System Acquisition and Development: Create your NIS2 measures

Get tips on securely acquiring and developing systems with a focus on ISO 27001, helping meet NIS2 requirements. Post explains key aspects like secure coding, acquiring secure applications and testing or publishing changes in a controlled manner.

article

16.4.2024

Mac webcam hijack flaw wins man $100,500 from Apple

🧑‍💻 Security researcher got a $100,500 bug bounty from Apple after discovering a vulnerability in Safari browser for macOS that could allow a malicious website to hijack accounts and seize control of users' webcams. #cybersecurity

Go to article at
28.1.2022

How tech is a weapon in modern domestic abuse -- and how to protect yourself

Through technology, it is possible to stalk someone with very little effort. Motivations are manifold. This article tells more about spyware and stalkerware and how you can combat technological stalking. #cybersecurity

Go to article at
21.1.2022

483 Crypto.com accounts compromised in $34 million hack

Crypto.com confirmed a breach resulting in unauthorized withdrawals worth 34 M$. Some were allegedly prevented, in rest customers fully reimbursed. In 2021 platform also suffered a glitch that led to duplicate purchases. #cybersecurity

Go to article at
21.1.2022

CISA urges US orgs to prepare for data-wiping cyberattacks

Cyber criminals are exploiting CVE-2021-32648 for data-wiping attacks against Ukrainian gov and businesses. #Cybersecurity agencies around the world are urging businesses to take preparatory actions, like MFA, patching and vuln scanning.

Go to article at
21.1.2022

Panic As Kosovo Pulls The Plug On Its Energy Guzzling Bitcoin Miners

🛑 To ease energy crisis, Kosovo's government in Dec announced an immediate, albeit temporary, ban on all crypto mining activity. This created panic, as people are selling off their mining equipment – at knockdown prices. #cybersecurity

Go to article at
21.1.2022

FIN8 Hackers Spotted Using New 'White Rabbit' Ransomware in Recent Attacks

⚠️ FIN8 is back with a never-before-seen #ransomware, recently used eg against US banks. This malware uses double-extortion and hides its maliciousness by requiring a specific command-line password to decrypt its internal configuration.

Go to article at
21.1.2022

Fingers point to Lazarus, Cobalt, FIN7 as key hacking groups attacking finance industry

💰 Finance industry, a top target for #cybercrime due to eg lots of sensitive PII and data systems critical for economy. Lazarus, Cobalt, and FIN7 top threat actors. Top attacks phishing, BEC, malware (also PoS), card skimmers and DDoS.

Go to article at
14.1.2022

FBI: Hackers target US defense firms with malicious USB packages

⚠️ FIN7 cybercrime group targets US defense industry by posting them malicious USB devices. Hackers impersonate authorities to trick connecting the drive. Once plugged in, device injects keystrokes to install malware. #cybersecurity

Go to article at
14.1.2022

Cloud Apps Replace Web as Source for Most Malware Downloads

🔺 Google Drive, Microsoft OneDrive and Box are (unsurprisingly) also cyber criminals favourites for #malware hosting. 🔺 On delivery side weaponized MS Office documents count for 37% of all malware downloads (nearly +100% from 2020)

Go to article at
14.1.2022