Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: Secure your passwords! 📝 DORA has come into effect 💰 News: data protection 🔐

Published at

17:01

Open digest

🛡️ Cyberdigest: DORA is coming into effect January 17th, are you ready? 🛡️ Security trends 2025 ⭐️

Published at

17:04

Open digest

🛡️ Cyberdigest: No time to waste, join us for the first webinars of the year 2025! ➡️💻 Impactful cybersecurity events of 2024 📰

Published at

17:03

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

SOC 2: Working towards compliance

With the help of SOC 2, organisations can provide proof of effectively implemented controls and the use of best practices to protect the data to their customers and stakeholders, which may help to build trust.

31.7.2023

Personnel information security training and guidelines in Cyberday

Most data breaches start with human error. Still, investments in technical information security are often made more eagerly. We tell you why staff information security training and guidelines are important and how to implement then efficiently.

13.6.2023

Information security risk management in Cyberday: Identifying risks, evaluation, treatment and closure

Every cyber security framework highlights risk management in its own way. We summarize in this post, what's essential in information security risk management and what kind of an approach Cyberday offers for it.

13.6.2023

Become a Cyberday partner: Features, benefits and best practices

A good and efficient tool such as Cyberday is a great way to work on the organization's cyber secuirty. However, for some organizations that is not enough and the expertise and support of a consultant is needed. Our partner program offers both!

6.6.2023

Cyberday Community has been launched!

We just launched a new Community section inside Cyberday. Our goal is to make collaboration with your peers and with us easier and thus help you improve your information security even further!

24.3.2023

ISO 27001 standard updated to 2022 version - what changed?

What has changed when comparing 2013 vs. 2022 versions of ISO 27001 and how are these updates visible on Cyberday?‍

18.11.2022

Efficient cyber risk management with new autopilot mode

We're constatly searching for ways to automate and create efficient cyber risk management. Our newest additions is risk autopilot mode. It's concept is described on this post.

1.6.2022

Infographic: Why is cyber security getting more and more important?

Here's a visual summary of some of the drivers that continue to make cyber security more and more important for all organizations.

11.2.2022

News articles

Get weekly news? Subscribe now >>

SolarWinds hackers, Nobelium, once again strike global IT supply chains, Microsoft warns

⚡ Nobelium attacks IT supply chains. In May, MS detected an attack on 140 service providers. If successful, the effects are devastating. A previous breach to the Orion software supply chain poisoned 18,000 customers. #cybersecurity

Go to article at

Massive campaign uses YouTube to push password-stealing malware

⚡ YouTube videos increasingly used to distribute password-stealing trojans. This #malware quietly runs on a device stealing passwords, cookies, credit card info, screenshots of windows, and arbitrary files defined by threat actors.

Go to article at

US Candy Corn Producer Became Latest Ransomware Victim in the Food Sector

🏭 Another attack on food supply chain U.S. candy company struggling to fill Halloween orders after #ransomware attack encrypted its data. Company has been able to continue production "only in select manufacturing facilities".

Go to article at

Acer hacked twice in a week by the same threat actor

Last wk threat actors hacked Acer India and stole client data. Acer called this an "isolated attack". "To proof Acer is still vulnerable", attackers now shared evidence they breached Acer Taiwan's servers and stole data. #cybersecurity

Go to article at

Many organizations lack basic cyber hygiene despite high confidence in their cyber defenses

SpyCloud researched organizations' #cybersecurity level: ⚠️ 81% felt that their level was good / excellent 🛑 41% did not have clear password policies 🛑 44% did not use MFA ⚡ Emails with malicious attachments / links seen as #1 threat

Go to article at

October is high season for cyberattacks, Infosec Institute study shows

October is Europe's #cybersecurity month, but also a busy time for cyber attacks. Research results: 📈 2016-2020 growth in attacks + 283% 📈 About 20% of attacks in October 💡 Invest in training, patching, access control and MFA

Go to article at

How Coinbase Phishers Steal One-Time Passwords

⚠️ One-time passwords (OTPs), such as authenticator codes, were quite successfully stolen in #phishing campaign targeting Coinbase users. Always important to guide people on how to verify the actual site domain from browser address bar.

Go to article at

Phishing Campaign Uses Mathematical Symbols to Trick AI-based Spam Detectors

📨 In a “New eVoice” phishing email impersonating Verizon, the letter V of the logo had been replaced with nearby symbols (e.g. ✔️) so that AI-based security systems would not detect the brand impersonation. #cybersecurity

Go to article at

Microsoft Fended Off a Record 2.4 Tbps DDoS Attack Targeting Azure Customers

DDoS attack on Azure environment came from a botnet of estimated 70,000 "infected devices". ⚠️ Growing attacks (lately also Yandex) tell of a frightening ability to overwhelm a desired service with huge traffic. #cybersecurity

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial