Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Cannes Hospital data breach, the impact of AI and NIS2 evolution: the Cyberday product and news round-up 5/2024 🛡️

May's Product and News Update presents the new monthly ISMS reports as well as the Metrics page. Other topics include Cyberday's new framework DORA and recent news around the world.

article

17.5.2024

6 ways to assess security work effectiveness

Evaluating the effectiveness of your cybersecurity involves examining the adequacy of your existing security measures. This process helps you identify your current security status and determine the necessary actions to enhance and fortify.

article

3.5.2024

System acquisition and development in NIS2: Suggested best practices

Get tips on securely acquiring and developing systems with a focus on ISO 27001, helping meet NIS2 requirements. Post explains key aspects like secure coding, acquiring secure applications and testing or publishing changes in a controlled manner.

article

16.4.2024

Continuity management in NIS2: Benchmark measures for business continuity and backups with ISO 27001

This post offers insight on complying with NIS2's continuity and backup requirements using ISO 27001's best practices. It guides you through continuity planning, backup processes, challenges, and achieving compliance effectively.

article

12.4.2024

HR security in NIS2: Best practices for compliance

Learn how HR drives ISO 27001 and NIS2 compliance through security training, roles, and policies essential for building a strong information security culture.

article

5.4.2024

Access control & MFA in NIS2: Build a solid foundation with ISO 27001 controls

What are the requirements for access control and MFA in NIS2 and ISO 27001 and how can they be implemented successfully? Learn more about the controls, requirements, best practices and how to overcome potential challenges in this blog post.

article

4.4.2024

Potential Struggles IT Companies might Encounter with Incident Identification and Reporting Today

The complexities of incident identification and reporting in IT, touching on coordination problems, tool inadequacies, and process deficiencies. It explores modern challenges like cyber threats and alert fatigue, as well as the cognitive gap.

article

28.3.2024

Information Security Risk Management: A Step-by-step Guide to a Clear Process

Get a step-by-step guide on managing information security risks, from asset identification to monitoring, essential for navigating growing cybersecurity threats.

article

21.3.2024

How to work from home securely, the NSA way

NSA's top tips for remove work #cybersecurity: ⚠️ Keep your software and router updated 🔑 Use a password manager and 2FA 🧑‍💻 Separate work and life activities 🔗 Connect to office with a VPN

Go to article at
3.3.2023

US cybersecurity chief: Software makers shouldn't lawyer their way out of security responsibilities

⚠️ "Unsafe software / tech products more dangerous than Chinese spy balloons." CISA director says: "Tech providers must prioritize security over e.g. cost, features, and speed to market" #cybersecurity

Go to article at
3.3.2023

LastPass Says Employee's Home Computer Was Hacked And Corporate Vault Stolen

Another LastPass breach: “.. targeted engineer's home PC and exploited vulnerable 3rd party software, which enabled RCE capability and implanting keylogger #malware” ☢️ Hacked DevOps engineer 1 of 4 employees w/ access to corporate vault

Go to article at
3.3.2023

Cyberattack on Dole Temporarily Shuts Down Production in North America

Company memo says a #cyberattack forced Dole to shut down production plants in US and halt food shipments to grocery stores. 🥫 This continues growing list of high-profile attacks on food and agriculture sector (e.g. JBS, Llobet).

Go to article at
24.2.2023

LVHN Reports Cyberattack by Russian Ransomware Gang

The #ransomware group behind the attack, called "Black cat", is an example of a gang that advertises their RaaS services on dark web and takes a cut of the final attack profits. ⚠️ Ransomware-as-a-service is becoming more and more common.

Go to article at
24.2.2023

Will ChatGPT start writing killer malware?

ChatGPT is good enough to produce homework answers, legal responses and medical diagnoses that pass the “smell test”. Even now it can e.g. make #phishing more convincing and automate ransomware negotiations. What's next? See article >>

Go to article at
24.2.2023

Phishing Fears Ramp Up on Email, Collaboration Platforms

State of Email Security report: 🎣 97% of companies saw a #phishing attack 💰 66% acknowledged a successful ransomware attack 🏭 Energy (83%) & healthcare (80%) among most breached industries 💬 Slack and Teams growing exploit channels

Go to article at
24.2.2023

Spam and phishing in 2022

📨 2022 #phishing themes: - 49% of emails were spam, 30% of spam originated from Russia - Global events (e.g. World Cup, Ukraine crisis) and bonuses/compensations big scam themes - Scammers’ crypto interest growing

Go to article at
17.2.2023

Camera the Size of a Grain of Salt

📸 Micro-sized cameras have great potential to e.g. identify health risks. New breakthroughs enable tiny cameras w/ crisp images on par with 500,000x larger camera lens. This can also change the nature of surveillance. #cybersecurity

Go to article at
17.2.2023