Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Most important documents in ISO 27001 certification audit

The ISO 27001 standard does specifically define some key documents, which need to be gathered together and be easily shareable e.g. for the auditor. In this blog, we'll present these most important documents for an ISO 27001 certification audit.

article

30.1.2025

NIS2 & national implementation: which local NIS2 laws are available in Cyberday?

EU Member States are required to adopt NIS2 into national law. Key national decisions include defining local authorities, monitoring mechanisms, and tailoring regulations to meet specific needs.

article

23.1.2025

ISO 27001 certification: What happens in the certification audit?

This blog post gives an overall intro to information security auditing and a detailed go-through of the ISO 27001 certification audit process.

article

22.1.2025

What is ISO 27001? Intro to the global information security gold standard.

Whether you're new to ISO 27001 or looking to strengthen your current practices, this post will walk you through its essentials, why it matters, and how it can improve your approach to information security.

article

22.1.2025

Password Security: Avoid these 5 common mistakes

Password security is something that no one should underestimate in the face of today's threats. One sensible option for secure password management is to use software designed for this purpose.

article

16.1.2025

Framework recap, role of the CISO & and vendor assessments: Cyberday product and news round-up 12/2024 🛡️

December's product and news round-up will showcase the vendor security assessments and new enterprise-level features, an overview of the key frameworks for 2025 and the roles of the CISO and personnel in an organisation's security.

article

19.12.2024

Europe's Compliance Revolution: Evolving Cyber Sec Consulting

The evolving cyber sec landscape and growing demand for compliance in combination with a shortage of professionals calls for new ways of working. With the help of partnerships and agile tools, consultants can benefit from the current situation.

article

18.12.2024

TISAX: Understanding the Automotive framework

By embracing TISAX, automotive industry operators can improve information security, enhance compliance and strengthen their market position. Read more about TISAX, its scope, requirements and how ISO 27001 fits in.

article

3.12.2024

4 Most Common Cyberattack Patterns from 2022

Challenging year for security teams with e.g. war in Europe, persistently remote workforce and a series of large-scale #cyberattack's. Common patterns: 💰 Ransomware 📨 Email compromise 🏭 Supply chain attacks 🤖 IoT device attacks

Go to article at
23.12.2022

“Suspicious login” scammers up their game – take care at Christmas

"There was a suspicious login to your account" is a popular start by cyber scammers. In this article you'll see a sequence of screenshots and steps involved in a recent social media #cyberattack received by the authors. Scam details ➡️

Go to article at
23.12.2022

Make sure your company is prepared for the holiday hacking season

Why cyberattacks increase around the holidays: 🧑‍💻 Undestaffed IT staff ⚠️ Relaxed #cybersecurity posture after a busy year ⏰ Rush to finish projects, danger for mistakes 👤 Contractors filling positions - not familiar with guidelines

Go to article at
23.12.2022

UK Privacy Regulator Names and Shames Breached Firms

ICO has taken the step of publishing details of companies that suffered personal data breaches. The era of relative anonymity looks to be over. In the year ending 10/2022, ICO-issued fines also incresased over 200%, to £15.2m. #privacy

Go to article at
23.12.2022

Okta says its GitHub account hacked, source code stolen

Okta is a leading provider of IAM solutions. In a 'confidential' email Okta describes a recent #cyberattack, which lead to threat actors accessing its GitHub repositories and stealing Okta Workforce Identity Cloud (WIC) source code.

Go to article at
23.12.2022

EU takes another step towards US data-sharing agreement

🌐 EU: draft for EU-US #privacy framework: - US intelligence data gathering limited - Companies have #privacy requirements for joining (e.g. deletion, 3rd parties) - Redress mechanism for EU citizens Final decision not before spring 2023

Go to article at
16.12.2022

CSAF Is the Future of Vulnerability Management

Today, most security advisories use custom format and are not machine-readable. 👉 New CSAF 2.0 enables #vulnerability management automation and better communication by standardizing security advisories to a structured JSON format.

Go to article at
16.12.2022

Top tips for security‑ and privacy‑enhancing holiday gifts

#Cybersecurity gifts: 🔑 2FA hardware-based key: No physical key, no stealing your accounts 💻 Laptop privacy screen: No shoulder surfing 🔐 Password manager: No credential stuffing 🛡️ VPN: No spying by ISPs, hackers or advertisers

Go to article at
16.12.2022

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

InfraGard is an FBI program for #cybersecurity threat info sharing with private sector, designed for key industry people. ⚠️ Now user db for InfraGard was breached, incl. names and contact information for tens of thousands of members.

Go to article at
16.12.2022