Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

NIS2 national legistation, ransomware and a new development forum: Cyberday product and news round-up 9/2024 🛡️

This is the September news and product review from Cyberday. Read news about ransomware, new phishing techniques and local NIS2-legistations.

article

20.9.2024

IT and OT Cyber Security: Different Environments, Different Priorities

This blog post outlines the key differences between IT and OT cyber security, focusing on their distinct areas, objectives, environments, threat landscapes, and compliance requirements.

article

4.9.2024

Cyber Security in Supply Chain Risk Management

Businesses should prioritize supply chain security by adopting best cyber security practices, fostering resilience, and promoting collaboration to protect against evolving cyber threats. Learn more about this topic in this blog post.

article

22.8.2024

Spreadsheet vs. ISMS tool - top 10 reasons why a tool is better than the traditional way

Discover the top 10 reasons why agile tools outperform traditional spreadsheets in managing cyber security compliance, from centralized management to continuous improvement.

article

22.8.2024

ISMS Essentials: Mastering a Data System Inventory for Your Organization

This post provides essential insights for maintaining a data system inventory within your organization's ISMS, detailing key processes, asset types, and tackling common challenges.

article

15.8.2024

Incident Detection: Building, Nurturing, and Continuously Improving a Proactive Environment

Shift from reactive to proactive incident detection. Use advanced tools, continuous learning, and customised strategies to anticipate and prevent issues. Focus on constant improvement and innovation to boost security and resilience.

article

15.8.2024

ISO 27001 and ISO 9001: Differences, how they work together and benefits of combining

Learn about the synergy between ISO 27001 and ISO 9001. Learn how integrating these standards enhances information security, quality management, and overall operational efficiency, using case examples and actionable insights.

article

6.6.2024

NIS2 Compliance: Top 5 Reasons for the Manufacturing Sector

The article highlights the critical importance for manufacturers to comply with NIS2 regulations to safeguard their operations and infrastructure from cyber threats.

article

31.5.2024

EU takes another step towards US data-sharing agreement

🌐 EU: draft for EU-US #privacy framework: - US intelligence data gathering limited - Companies have #privacy requirements for joining (e.g. deletion, 3rd parties) - Redress mechanism for EU citizens Final decision not before spring 2023

Go to article at
16.12.2022

CSAF Is the Future of Vulnerability Management

Today, most security advisories use custom format and are not machine-readable. 👉 New CSAF 2.0 enables #vulnerability management automation and better communication by standardizing security advisories to a structured JSON format.

Go to article at
16.12.2022

Top tips for security‑ and privacy‑enhancing holiday gifts

#Cybersecurity gifts: 🔑 2FA hardware-based key: No physical key, no stealing your accounts 💻 Laptop privacy screen: No shoulder surfing 🔐 Password manager: No credential stuffing 🛡️ VPN: No spying by ISPs, hackers or advertisers

Go to article at
16.12.2022

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

InfraGard is an FBI program for #cybersecurity threat info sharing with private sector, designed for key industry people. ⚠️ Now user db for InfraGard was breached, incl. names and contact information for tens of thousands of members.

Go to article at
16.12.2022

New Ransom Payment Schemes Target Executives, Telemedicine

New devious #ransomware schemes: 🏥 Targeting healthcare web consultations by sending them booby-trapped medical records for the “patient” 📥 Carefully "forging" inboxes of company execs to imply they were involved in insider trading

Go to article at
9.12.2022

Hacking cars remotely with just their VIN

#Cybersecurity researcher finds that your car's (e.g. Hyundai, Nissan, Honda) mobile app may allow hackers to remotely unlock, turn on the engine or honk the horn. ➡️ See details of exploiting vulnerabilities to bypass authorisation

Go to article at
9.12.2022

Fantasy – a new Agrius wiper deployed through a supply‑chain attack

⚠️ Agrius is an Iran-aligned #cybercrime group, targeting victims e.g. in Israel and the UAE. They launched a supply-chain attack abusing Israeli software to deploy a wiper malware to numerous customer organizations. Attack details >>

Go to article at
9.12.2022

SIM swapper sent to prison for 2FA cryptocurrency heist of over $20m

Florida man, part of #cybercrime gang, stole 20 M$ from crypto wallets utilizing SIM swapping, sentenced to 18mo and to pay back earnings. ⚠️ SIM-swap problems are why e.g. many authorities no longer recommend using SMS-based 2FA.

Go to article at
9.12.2022

Gangs of cybercriminals are expanding across Africa, investigators say

#Cybercrime growing fast in Africa, driven by internet use growth and opportunities due to economic crisis. 🚨 In Nov. police seized 70 members & 50 properties linked to Black Axe gang operating in South Africa, Nigeria and Ivory Coast.

Go to article at
2.12.2022