Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: Most important documents in ISO 27001 audit 📑 Join our NIS2 & ISO 27001 webinars ➡️ Look into cyberthreat trends 👾

Published at

17:05

Open digest

🛡️ Cyberdigest: 7 new frameworks! 🎉 Explore our ISO 27001 collection 📚 Malware & privacy news 📰

Published at

17:02

Open digest

🛡️ Cyberdigest: Secure your passwords! 📝 DORA has come into effect 💰 News: data protection 🔐

Published at

17:01

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

Become a Cyberday partner: Features, benefits and best practices

A good and efficient tool such as Cyberday is a great way to work on the organization's cyber secuirty. However, for some organizations that is not enough and the expertise and support of a consultant is needed. Our partner program offers both!

6.6.2023

Cyberday Community has been launched!

We just launched a new Community section inside Cyberday. Our goal is to make collaboration with your peers and with us easier and thus help you improve your information security even further!

24.3.2023

ISO 27001 standard updated to 2022 version - what changed?

What has changed when comparing 2013 vs. 2022 versions of ISO 27001 and how are these updates visible on Cyberday?‍

18.11.2022

Efficient cyber risk management with new autopilot mode

We're constatly searching for ways to automate and create efficient cyber risk management. Our newest additions is risk autopilot mode. It's concept is described on this post.

1.6.2022

Infographic: Why is cyber security getting more and more important?

Here's a visual summary of some of the drivers that continue to make cyber security more and more important for all organizations.

11.2.2022

Cyberday Teams app is now available!

Our Teams app passed the latest Microsoft tests and is now available from the Teams app store. This article reviews the benefits and deployment of Cyberday's Teams app.

1.7.2020

Content update published to Cyberday

We released an update to Cyberday documentation. The goal was to streamline documentation, highlight the most important things and significantly reduce the amount of separately documented items.

11.6.2020

Cyberday launched: Frameworks, Teams-integration and much more

Cyberday works now inside a Microsoft Teams and by choosing a framework you can guide your own work. In this blog you'll find a summary from reforms!

20.5.2020

News articles

Get weekly news? Subscribe now >>

New Ransom Payment Schemes Target Executives, Telemedicine

New devious #ransomware schemes: 🏥 Targeting healthcare web consultations by sending them booby-trapped medical records for the “patient” 📥 Carefully "forging" inboxes of company execs to imply they were involved in insider trading

Go to article at

Hacking cars remotely with just their VIN

#Cybersecurity researcher finds that your car's (e.g. Hyundai, Nissan, Honda) mobile app may allow hackers to remotely unlock, turn on the engine or honk the horn. ➡️ See details of exploiting vulnerabilities to bypass authorisation

Go to article at

Fantasy – a new Agrius wiper deployed through a supply‑chain attack

⚠️ Agrius is an Iran-aligned #cybercrime group, targeting victims e.g. in Israel and the UAE. They launched a supply-chain attack abusing Israeli software to deploy a wiper malware to numerous customer organizations. Attack details >>

Go to article at

SIM swapper sent to prison for 2FA cryptocurrency heist of over $20m

Florida man, part of #cybercrime gang, stole 20 M$ from crypto wallets utilizing SIM swapping, sentenced to 18mo and to pay back earnings. ⚠️ SIM-swap problems are why e.g. many authorities no longer recommend using SMS-based 2FA.

Go to article at

Gangs of cybercriminals are expanding across Africa, investigators say

#Cybercrime growing fast in Africa, driven by internet use growth and opportunities due to economic crisis. 🚨 In Nov. police seized 70 members & 50 properties linked to Black Axe gang operating in South Africa, Nigeria and Ivory Coast.

Go to article at

Black Basta Gang Deploys Qakbot Malware in Aggressive Cyber Campaign

Qakbot #malware now used actively to attack companies. Starts with phishing, ends in ransomware. ⚠️ "Attacks are swift, with ransomware deployed in less than half a day after obtaining domain admin privileges in under two hours."

Go to article at

Majority of US Defense Contractors Not Meeting Basic Cybersecurity Requirements

US DoD introduced new #cybersecurity framework CMMC, that contractors must pass to bid for contracts. ⚠️ There's work to be done - now only 13% of contractors are at "good enough" compliance level (CMMC coming into force next year).

Go to article at

$275M Fine for Meta After Facebook Data Scrape

Authorities fine Meta 275M€ and require #cybersecurity changes. 👉 Data protection by design and default was inadequate, as threat actors were able to use "data scraping" to exfiltrate massive amounts of collated personal user data.

Go to article at

LastPass admits to customer data breach caused by previous breach

In Aug LastPass reported a breach - attackers planted malware on dev's computer. ⚠️ Now reports of related breach “using info obtained in prev incident”. Passwords weren't stolen but customer data was, that can cause credible #phishing.

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial