Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Navigating the Cybersecurity Maze: Master NIS2 with the help of ISO 27001

Learn how to master NIS2 with ISO 27001 and grab our free NIS2 e-book! This blog post was originally written for the Cyber Security Nordic 2024 event where Cyderday is presented as Strategic partner.

article

3.10.2024

Corporate Security Alert: Identifying Dangerous Apps on Employee Phones

This article uncovers hidden security risks of popular apps on work devices, covering social media, messaging, cloud storage, gaming, utility, health, VPN, and shopping apps, with recommendations to safeguard corporate data.

article

20.9.2024

NIS2 national legistation, ransomware and a new development forum: Cyberday product and news round-up 9/2024 🛡️

This is the September news and product review from Cyberday. Read news about ransomware, new phishing techniques and local NIS2-legistations.

article

20.9.2024

IT and OT Cyber Security: Different Environments, Different Priorities

This blog post outlines the key differences between IT and OT cyber security, focusing on their distinct areas, objectives, environments, threat landscapes, and compliance requirements.

article

4.9.2024

Cyber Security in Supply Chain Risk Management

Businesses should prioritize supply chain security by adopting best cyber security practices, fostering resilience, and promoting collaboration to protect against evolving cyber threats. Learn more about this topic in this blog post.

article

22.8.2024

Spreadsheet vs. ISMS tool - top 10 reasons why a tool is better than the traditional way

Discover the top 10 reasons why agile tools outperform traditional spreadsheets in managing cyber security compliance, from centralized management to continuous improvement.

article

22.8.2024

ISMS Essentials: Mastering a Data System Inventory for Your Organization

This post provides essential insights for maintaining a data system inventory within your organization's ISMS, detailing key processes, asset types, and tackling common challenges.

article

15.8.2024

Incident Detection: Building, Nurturing, and Continuously Improving a Proactive Environment

Shift from reactive to proactive incident detection. Use advanced tools, continuous learning, and customised strategies to anticipate and prevent issues. Focus on constant improvement and innovation to boost security and resilience.

article

15.8.2024

Coca-Cola Investigates Data-Theft Claims After Ransomware Attack

#Ransomware group Stormous claims to have stolen 161GB of Coca-Cola's data - and is willing to sell it for 64k€. Case is unconfirmed & the relatively small ask is making experts suspicious of the value and even existence of stolen data.

Go to article at
29.4.2022

Facebook phishers threaten users with Page Recovery Help Support

Bogus recovery service activity on FB, trying to scare users into #phishing traps to takeover accounts and steal more FB pages for this use. ➡️ Stay aware and use MFA and good password practices to protect your account. Learn more >>

Go to article at
29.4.2022

Microsoft Discloses Onslaught of Russian Cyberattacks on Ukraine

Between 23/2-08/4, MS observed 37 destructive RUS #cyberattack's in Ukraine. ⚠️ This suggests cyber playing a bigger role in the war than previously known. Example timelines of linked cyber&military operations in the article >>

Go to article at
29.4.2022

Ransomware Attacks Affected 649 Critical Infrastructure Organizations in 2021, FBI Cyber Crime Report Says

🗞️ FBI's IC3 released 2021 its cyber crime report. 👤 847,376 complaints 💸 $6.9 billion in total losses #Ransomware attacks pose the biggest risk to critical infrastructure, with 649 organizations affected in 14/16 sectors in 2021.

Go to article at
8.4.2022

The Original APT: Advanced Persistent Teenagers

⚠️ LAPSUS$ has breached top companies. MS warns they use old-fashioned techniques, that are hard to block with tech: 👤 target staff at personal addresses 💰 offer $20,000 a week to buy remote access creds 🎣 #phishing to help desk

Go to article at
8.4.2022

Android apps with 45 million installs used data harvesting SDK

Warning about Play apps stealing data with an SDK by a shady Panama-based firm. ⚠️ Apps were collecting data with significant #privacy risks, e.g. any clipboard content, GPS data, emails and phone numbers. List of apps in the article >

Go to article at
8.4.2022

Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin

🚨 Takedown of Hydra, a Russian-language darkweb market of 17M users and active since 2015, was announced on Tuesday. It was used to sell e.g.: 💊 illegal narcotics 🆔 forged documents / IDs 💳 stolen credit / sim cards #cybersecurity

Go to article at
8.4.2022

Lapsus$ And SolarWinds Hackers Both Use The Same Old Trick To Bypass MFA

MFA is one of most important safeguards in #cybersecurity. ⚠️ But hackers have ways to clear weaker forms of MFA. A technique called MFA prompt-bombing has been used in multiple high-profile company hacks lately. Learn more here >>

Go to article at
8.4.2022

A Detailed Look at the Conti Ransomware Gang

Ukrainian researcher leaked 60,000 messages from inside Conti - a #ransomware gang that extorted 180M$ just last year. ☢️ Msgs reveal e.g. a business-like hierarchy, ways to dodge law enforcement and negotiation tactics. Learn more >>

Go to article at
1.4.2022