Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

ISO 27001 and ISO 9001: Differences, how they work together and benefits of combining

Learn about the synergy between ISO 27001 and ISO 9001. Learn how integrating these standards enhances information security, quality management, and overall operational efficiency, using case examples and actionable insights.

article

6.6.2024

NIS2 Compliance: Top 5 Reasons for the Manufacturing Sector

The article highlights the critical importance for manufacturers to comply with NIS2 regulations to safeguard their operations and infrastructure from cyber threats.

article

31.5.2024

Cannes Hospital data breach, the impact of AI and NIS2 evolution: the Cyberday product and news round-up 5/2024 🛡️

May's Product and News Update presents the new monthly ISMS reports as well as the Metrics page. Other topics include Cyberday's new framework DORA and recent news around the world.

article

17.5.2024

6 ways to assess security work effectiveness

Evaluating the effectiveness of your cybersecurity involves examining the adequacy of your existing security measures. This process helps you identify your current security status and determine the necessary actions to enhance and fortify.

article

3.5.2024

System acquisition and development in NIS2: Suggested best practices

Get tips on securely acquiring and developing systems with a focus on ISO 27001, helping meet NIS2 requirements. Post explains key aspects like secure coding, acquiring secure applications and testing or publishing changes in a controlled manner.

article

16.4.2024

Continuity management in NIS2: Benchmark measures for business continuity and backups with ISO 27001

This post offers insight on complying with NIS2's continuity and backup requirements using ISO 27001's best practices. It guides you through continuity planning, backup processes, challenges, and achieving compliance effectively.

article

12.4.2024

HR security in NIS2: Best practices for compliance

Discover how the crucial role of HR in information security not only shapes the corporate security culture, but also steers the organization towards ISO 27001 and NIS2 compliance, ensuring secure handling of information assets and much more.

article

5.4.2024

Access control & MFA in NIS2: Build a solid foundation with ISO 27001 controls

What are the requirements for access control and MFA in NIS2 and ISO 27001 and how can they be implemented successfully? Learn more about the controls, requirements, best practices and how to overcome potential challenges in this blog post.

article

4.4.2024

4 Most Common Cyberattack Patterns from 2022

Challenging year for security teams with e.g. war in Europe, persistently remote workforce and a series of large-scale #cyberattack's. Common patterns: 💰 Ransomware 📨 Email compromise 🏭 Supply chain attacks 🤖 IoT device attacks

Go to article at
23.12.2022

“Suspicious login” scammers up their game – take care at Christmas

"There was a suspicious login to your account" is a popular start by cyber scammers. In this article you'll see a sequence of screenshots and steps involved in a recent social media #cyberattack received by the authors. Scam details ➡️

Go to article at
23.12.2022

Make sure your company is prepared for the holiday hacking season

Why cyberattacks increase around the holidays: 🧑‍💻 Undestaffed IT staff ⚠️ Relaxed #cybersecurity posture after a busy year ⏰ Rush to finish projects, danger for mistakes 👤 Contractors filling positions - not familiar with guidelines

Go to article at
23.12.2022

UK Privacy Regulator Names and Shames Breached Firms

ICO has taken the step of publishing details of companies that suffered personal data breaches. The era of relative anonymity looks to be over. In the year ending 10/2022, ICO-issued fines also incresased over 200%, to £15.2m. #privacy

Go to article at
23.12.2022

Okta says its GitHub account hacked, source code stolen

Okta is a leading provider of IAM solutions. In a 'confidential' email Okta describes a recent #cyberattack, which lead to threat actors accessing its GitHub repositories and stealing Okta Workforce Identity Cloud (WIC) source code.

Go to article at
23.12.2022

EU takes another step towards US data-sharing agreement

🌐 EU: draft for EU-US #privacy framework: - US intelligence data gathering limited - Companies have #privacy requirements for joining (e.g. deletion, 3rd parties) - Redress mechanism for EU citizens Final decision not before spring 2023

Go to article at
16.12.2022

CSAF Is the Future of Vulnerability Management

Today, most security advisories use custom format and are not machine-readable. 👉 New CSAF 2.0 enables #vulnerability management automation and better communication by standardizing security advisories to a structured JSON format.

Go to article at
16.12.2022

Top tips for security‑ and privacy‑enhancing holiday gifts

#Cybersecurity gifts: 🔑 2FA hardware-based key: No physical key, no stealing your accounts 💻 Laptop privacy screen: No shoulder surfing 🔐 Password manager: No credential stuffing 🛡️ VPN: No spying by ISPs, hackers or advertisers

Go to article at
16.12.2022

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

InfraGard is an FBI program for #cybersecurity threat info sharing with private sector, designed for key industry people. ⚠️ Now user db for InfraGard was breached, incl. names and contact information for tens of thousands of members.

Go to article at
16.12.2022