Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Working towards NIS2 compliance with Cyberday

✈️ You want to lift your cyber security management to a new level & get NIS2 compliant with a smart tool like Cyberday? In this post you'll learn how your organization can achieve NIS2 compliance in a smart way by building an own agile ISMS.

article

23.8.2023

Who does NIS2 apply to? Scope and required security measures explained.

In this post you'll learn about what industries are affected by NIS2, security requirements the directive sets, and the available enforcement methods if an organization is not compliant.

article

23.8.2023

What is NIS2 directive? Know EU's new cyber security legislation

Learn about the background and reasons behind the EU's new Network and Information Security 2 (NIS2) Directive. How does it affect your company and how should you react to be compliant?

article

1.8.2023

SOC 2: Working towards compliance

With the help of SOC 2, organisations can provide proof of effectively implemented controls and the use of best practices to protect the data to their customers and stakeholders, which may help to build trust.

article

31.7.2023

Personnel information security training and guidelines in Cyberday

Most data breaches start with human error. Still, investments in technical information security are often made more eagerly. We tell you why staff information security training and guidelines are important and how to implement then efficiently.

article

13.6.2023

Information security risk management in Cyberday: Identifying risks, evaluation, treatment and closure

Every cyber security framework highlights risk management in its own way. We summarize in this post, what's essential in information security risk management and what kind of an approach Cyberday offers for it.

article

13.6.2023

Become a Cyberday partner: Features, benefits and best practices

A good and efficient tool such as Cyberday is a great way to work on the organization's cyber secuirty. However, for some organizations that is not enough and the expertise and support of a consultant is needed. Our partner program offers both!

article

6.6.2023

Cyberday Community has been launched!

We just launched a new Community section inside Cyberday. Our goal is to make collaboration with your peers and with us easier and thus help you improve your information security even further!

article

24.3.2023

EU takes another step towards US data-sharing agreement

🌐 EU: draft for EU-US #privacy framework: - US intelligence data gathering limited - Companies have #privacy requirements for joining (e.g. deletion, 3rd parties) - Redress mechanism for EU citizens Final decision not before spring 2023

Go to article at
16.12.2022

CSAF Is the Future of Vulnerability Management

Today, most security advisories use custom format and are not machine-readable. 👉 New CSAF 2.0 enables #vulnerability management automation and better communication by standardizing security advisories to a structured JSON format.

Go to article at
16.12.2022

Top tips for security‑ and privacy‑enhancing holiday gifts

#Cybersecurity gifts: 🔑 2FA hardware-based key: No physical key, no stealing your accounts 💻 Laptop privacy screen: No shoulder surfing 🔐 Password manager: No credential stuffing 🛡️ VPN: No spying by ISPs, hackers or advertisers

Go to article at
16.12.2022

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

InfraGard is an FBI program for #cybersecurity threat info sharing with private sector, designed for key industry people. ⚠️ Now user db for InfraGard was breached, incl. names and contact information for tens of thousands of members.

Go to article at
16.12.2022

New Ransom Payment Schemes Target Executives, Telemedicine

New devious #ransomware schemes: 🏥 Targeting healthcare web consultations by sending them booby-trapped medical records for the “patient” 📥 Carefully "forging" inboxes of company execs to imply they were involved in insider trading

Go to article at
9.12.2022

Hacking cars remotely with just their VIN

#Cybersecurity researcher finds that your car's (e.g. Hyundai, Nissan, Honda) mobile app may allow hackers to remotely unlock, turn on the engine or honk the horn. ➡️ See details of exploiting vulnerabilities to bypass authorisation

Go to article at
9.12.2022

Fantasy – a new Agrius wiper deployed through a supply‑chain attack

⚠️ Agrius is an Iran-aligned #cybercrime group, targeting victims e.g. in Israel and the UAE. They launched a supply-chain attack abusing Israeli software to deploy a wiper malware to numerous customer organizations. Attack details >>

Go to article at
9.12.2022

SIM swapper sent to prison for 2FA cryptocurrency heist of over $20m

Florida man, part of #cybercrime gang, stole 20 M$ from crypto wallets utilizing SIM swapping, sentenced to 18mo and to pay back earnings. ⚠️ SIM-swap problems are why e.g. many authorities no longer recommend using SMS-based 2FA.

Go to article at
9.12.2022

Gangs of cybercriminals are expanding across Africa, investigators say

#Cybercrime growing fast in Africa, driven by internet use growth and opportunities due to economic crisis. 🚨 In Nov. police seized 70 members & 50 properties linked to Black Axe gang operating in South Africa, Nigeria and Ivory Coast.

Go to article at
2.12.2022