Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: 10 things I wish I knew before ISO 27001 process 👀 2024 cyber trends ⚖️

Published at

17:02

Open digest

🛡️ Cyberdigest: Easter Greetings! 🐣 Read about NIS2 supervision and penalties 📝🛡️

Published at

17:00

Open digest

🛡️ Cyberdigest: Read about EU's top frameworks! 🛡️ AI in cybersecurity 🧠 Next week's webinars ➡️

Published at

17:00

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

5 Efficient Ways for Involving People in Your Security Work

Discover how teamwork, education, reporting, and risk assessments empower ISMS. Explore 5 ways to engage people for a secure, collaborative digital space.

1.2.2024

AI Act, cyber risks and breaches: Cyberday product and news roundup 1/2024 🛡️

In January's summary, development themes include reporting updates, improved report sharing and upgraded Academy. On the news side talk about AI Act, cyber risks and breaches.

30.1.2024

10 most important tasks for a CISO and tips for being successful

Explore the top 10 responsibilities of a CISO and get best practices for success, covering risk management, collaboration, compliance, and continuous learning.

24.1.2024

The Human Firewall Effect: Tips for Securing Your Organization from Within

This blog post emphasizes the critical role employees play in bolstering an organization's cyber security. It discusses developing clear guidelines, employee training, and monitoring progress to create a strong human firewall.

19.1.2024

Encryption, RaaS, supply chain attacks: Monthly Cyberday product and news roundup 12/2023 🛡️

In December's summary, development themes include UI updates and information security statements. On the news side talk about encryption, RaaS and supply chain attacks.

15.12.2023

How do you benefit from ISO 27001 certification?

Why do organizations choose to go for ISO 27001 certification? In this blog article, we will give you our top 5 reasons to get certified. Certification will certainly benefit your security directly, but there are other kind of benefits available too.

25.10.2023

Working towards NIS2 compliance with Cyberday

✈️ You want to lift your cyber security management to a new level & get NIS2 compliant with a smart tool like Cyberday? In this post you'll learn how your organization can achieve NIS2 compliance in a smart way by building an own agile ISMS.

23.8.2023

Who does NIS2 apply to? Scope and required security measures explained.

In this post you'll learn about what industries are affected by NIS2, security requirements the directive sets, and the available enforcement methods if an organization is not compliant.

23.8.2023

News articles

Get weekly news? Subscribe now >>

Just 1% of Nonprofit Domains Have Basic DMARC Email Security Protections

⚠️ Only 1.2% of nearly 10M verified .org domains analyzed are using proper DMARC rules. DMARC is used to automatically flag emails that are suspected to be sent from an impersonated domain. It's an important tool for battling #phishing.

Go to article at

Fake ChatGPT Chrome Browser Extension Caught Hijacking Facebook Accounts

⚠️ "ChatGPT For Google", #malware version of real browser add-on, got 9k installations in 30 days. Extension harvested FB session cookies to hijack accounts. After this? Password change > Name / pic change > Extremist propaganda sharing

Go to article at

Hackers Drain Bitcoin ATMs Of $1.5 Million By Exploiting 0-Day Bug

Bitcoin ATMs allow people exchange bitcoin for other currencies. A threat actor exploited a #vulnerability to use the interface to upload and execute a malicious Java app and drain 56 BTC from accounts - roughly worth $1.5 million.

Go to article at

Employees Are Entering Sensitive Business Data Into ChatGPT

Content input to ChatGPT is used by OpenAI to train the AI. ⛔ Data shows 4.9% of users have at least once pasted company data into ChatGPT. Firms like JP Morgan and Verizon have blocked access to ChatGPT over such concerns. #privacy

Go to article at

Business on the dark web: deals and regulatory mechanisms

🦹 Hundreds of deals get made on the dark web daily: selling data, dealing illegal services, hiring crooks - with big money on the table. Article gives insight into dark web transactions and escrow services >> #cybersecurity

Go to article at

Microsoft Warns of Large-Scale Use of Phishing Kits to Send Millions of Emails Daily

⚠️ New AiTM #phishing kit (sold for 300$/mo) is growing fast in cybercrime world. AiTM phishing involves intercepting password and session cookies by deploying a proxy server between the user and the website - and can thus go around MFA.

Go to article at

Exfiltration malware takes center stage in cybersecurity concerns

📈 Spike in #malware designed to exfiltrate data directly from devices and browsers. Infostealers let cybercriminals to work at scale - stealing credentials, cookies, and auto-fill data to use in targeted attacks or sell on the darknet.

Go to article at

LockBit Claims it Stole SpaceX Schematics From Parts Supplier, Threatens to Leak Them

⚠️ #Ransomware gang boasts breaking into Maximum Industries, SpaceX supplier, and stealing 3,000 "certified rocket part drawings". LockBit's other recent alleged victims include e.g. ION and Royal Mail.

Go to article at

Fortinet warns of new critical unauthenticated RCE vulnerability

"Critical" buffer underflow #vulnerability (CVSS 9.3) impacting FortiOS and FortiProxy disclosed. Allows unauthenticated attacker to execute arbitrary code or perform DoS on vulnerable devices. Updates and workarounds in article >>

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial