Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

What is the NIS2 Law in Belgium? 🇧🇪 Introduction to requirements

Learn what the Belgian NIS2 Law is, Belgium’s national implementation of the EU NIS2 Directive. Understand key requirements, compliance timelines, sector coverage, and how Cyberday helps you meet them.

article

29.4.2025

What is CyberFundamentals? 🇧🇪 Belgium's cybersecurity framework

Learn what is CyberFundamentals, Belgium's cybersecurity framework for SMEs. Get an overview of requirements, benefits, and steps for compliance.

article

29.4.2025

10 things I wish I knew: Starting your ISO 27001 project on the right track

This post shares 10 key lessons learned from going through an ISO 27001 certification project - from the importance of setting clear goals and managing documentation to the realities of risk management and the value of using the right tools.

article

23.4.2025

Understanding NIS2: supervision and penalties of non-compliance

Let's now look into the NIS2 directive, it's supervision in EU member states and what is supervised. We'll also check out NIS2 penalties for noncompliance and how you can stay compliant (to avoid penalties).

article

15.4.2025

Comparing EU cybersecurity frameworks: NIS2, GDPR, DORA and more

A comparison of key cybersecurity frameworks in the EU, including NIS2, GDPR, DORA, CRA, and ISO 27001. Learn who they apply to and what they require.

article

10.4.2025

ISO 27001 compliance vs. certification: differences, benefits & which path to choose

Understanding when to pursue ISO 27001 compliance rather than going for certification—or vice versa—hinges on your organizational priorities, resources, and long-term security strategies. Check the differences and learn which path to choose.

article

1.4.2025

Framework recap, US security & and role management: Cyberday product and news summary 3/2025 🛡️

The March product and news update presents updates to role management and the new Trust Center, a review of the key frameworks for 2025 and US security.

article

28.3.2025

Understanding DORA compliance: Key steps to prepare your organization

Understand DORA compliance and get a clear DORA requirements summary with key compliance areas, practical steps, and essential guidelines to strengthen your organization's digital resilience.

article

18.3.2025

$150 Million Fine to Twitter Over Privacy Violations; Email and Phone for “Account Security” Used in Targeted Advertising Without User Knowledge

FTC is actively regulating privacy in the US. FTC can penalize for e.g. when a social network misleads its users about how personal data will be used or protected. This is what now happened to Twitter, resulting in a 150M$ #privacy fine.

Go to article at
3.6.2022

How to support women in cybersecurity

There are millions of unfilled #cybersecurity job openings around the globe. In the industry women make up roughly 24% of jobs, according to (ISC)². Untapped talent could mean e.g. less innovation. Reasoned thougths on women in cyber >>

Go to article at
3.6.2022

FBI seizes domains used to sell stolen data, DDoS services

FBI seizes harmful domains ⚠️ WeLeakInfo.to sold subscriptions for searching data from 10k data breaches, eg emails, phones, and passwords for online accounts. ⛔ ipstress.in and ovh-booter.com used for DDoS ordering #cybersecurity

Go to article at
3.6.2022

New Microsoft Zero-Day Attack Underway

MS Support Diagnostic Tool has a #vulnerability, that enables running commands remotely via using malicious MS Word documents. No patch available yet, limit by: ☑️ Turning off MSDT URL protocol ☑️ Disabling preview feature in IE

Go to article at
3.6.2022

How Dangerous Is the Cyber Attack Risk to Transportation?

⚠️ +186% increase between 6/2020 - 6/2021 in #ransomware attacks at transportation industry. 🚆 Cyber attacks targeting transport authorities e.g. managing train or subway routes could be terrible. Article lists needed best practices >>

Go to article at
20.5.2022

Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer

⚠️ Potentially harmful apps persist on Google Play for avg. 77 days Now researchers found 200 Android apps distributing #malware called Facestealer. These apps masquerade as VPNs, fitness, photo editing, and puzzle apps.

Go to article at
20.5.2022

Hackers can steal your Tesla Model 3, Y using new Bluetooth attack

Researchers developed a tool for Bluetooth Low Energy relay attacks. Tesla Model 3 & Y use a BLE-based entry system, so attack could unlock and start the cars. More security? At least there's ‘PIN to Drive’ feature. 🚘 #cybersecurity

Go to article at
20.5.2022

When Your Smart ID Card Reader Comes With Malware

A common security control is using smart ID cards for allowing physical access to buildings or systems. ⚠️ But employers don't always issue approved card readers, so people turn to low-cost online options. Case example >> #cybersecurity

Go to article at
20.5.2022

Some top 100,000 websites collect everything you type—before you hit submit

📨 Subscribing for newsletter, 🏨 booking a hotel, 💸 buying stuff online? New study shows some top websites collect some or all of this data before you hit 'Submit'. This behavior is similar to #malware called keyloggers. #privacy

Go to article at
20.5.2022