Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

ISMS implementation: comparison of documents, wikis, ISMS tools and GRC

There are a few different approaches to building an ISMS. In this post, we’ll compare these different methods, helping you understand which might be the best fit for your organization’s security management needs.

article

6.3.2025

What is Statement of Applicability (SoA) in ISO 27001?

In this blog, we'll cover the main purpose and benefits of a well-working Statement of Applicability document. We'll also explain why SoA is important, and 4 key roles it can play in information security work.

article

4.3.2025

Why is ISO 27001 compliance now more important than ever?

Year after year, ISO 27001 standard has remained one of the gold standards for information security. The global standard has remained relevant, but where did ISO 27001 originate? And why is it's popularity just going up?

article

27.2.2025

10 most common non-conformities in ISO 27001 audits

Audits and non-conformities drive organizations toward continuous improvement. But before your first ISO 27001 certification, it's good to be aware of some most common non-conformities, so you can avoid these in your certification audit.

article

18.2.2025

Got an ISO 27001 audit interview request - what should I expect?

In this blog, we will talk about the importance of employee participation in the audit interview process, why auditors value employee insights, and look into possible questions asked in an ISO 27001 interview.

article

13.2.2025

ISO 27001 compliance and certification checklist

Looking to ensure you fill ISO 27001 requirements? This checklist will present clearly ordered key steps that guide your organization in building an ISMS and getting compliant with the ISO 27001 standard.

article

6.2.2025

Most important documents in ISO 27001 certification audit

The ISO 27001 standard does specifically define some key documents, which need to be gathered together and be easily shareable e.g. for the auditor. In this blog, we'll present these most important documents for an ISO 27001 certification audit.

article

30.1.2025

NIS2 & national implementation: which local NIS2 laws are available in Cyberday?

EU Member States are required to adopt NIS2 into national law. Key national decisions include defining local authorities, monitoring mechanisms, and tailoring regulations to meet specific needs.

article

23.1.2025

Piracy OK: Russia to ease software licensing rules after sanctions

Software vendors are exiting the RUS market. RUS answers by allowing a form of piracy: ⚠️ Users can renew licenses without consent of the copyright owner in cases, where the holder is from a sanction-supporting country. #cybersecurity

Go to article at
11.3.2022

Top Cybersecurity Trends to Watch Out for in 2022

Tough cyber security year behind, busy year ahead. Trends described in the article: 🧑‍⚕️ Focus on the human factor 💰 Increasing #cybersecurity costs 👆 Biometrics 🦹 Triple-extorsion #ransomware ⚖️ Struggle for compliance

Go to article at
11.3.2022

Google Warns of Russian Hackers Targeing Ukrainians, European Allies via Phishing Attacks

RUS hackers are attacking UKR information resources nonstop with DDoS attacks. ⚠️ Now many nation-state groups seen launching #phishing attacks on many European countries. Messages may utilize lures related to invasion. Stay aware!

Go to article at
11.3.2022

Anonymous hacked Russian cams, websites, announced a clamorous leak

Anonymous is combatting the propaganda machine, trying to bring the reality of war in front of Russian people. 📹 400 hacked security cameras 🔗 hacked gov websites 🧑‍💻 rumours of Kaspersky antivirus source code hack #cybersecurity

Go to article at
11.3.2022

Joint Alert Says Russian Hackers Compromised Defense Contractors and Accessed Sensitive Information for Years

FBI, NSA, CISA in a #cybersecurity alert: ⚠️ Regular Russian targeting of defense contractors observed from Jan-20 to Feb-22 Tactics used are familiar: 🎣 spear phishing 🔓 password attacks 🦹 exploiting known vulnerabilities

Go to article at
4.3.2022

Microsoft Accounts Targeted by Russian-Themed Credential Harvesting

While crisis in Ukraine is sparking legitimate #cybersecurity concerns, small-time crooks are seeing an opportunity. ⚠️ Phishing emails to MS users warn of a recent sign-in from Moscow, looking to lift credentials and other personal data.

Go to article at
4.3.2022

Army of Cyber Hackers Rise Up to Back Ukraine

Support for Ukraine is strong on all fronts. 260k people joined the army of volunteer hackers, set up by digital minister. ⚠️ #Cybersecurity researchers are also reminding - these actions have legal risks and a real risk of "hack back".

Go to article at
4.3.2022

Don’t fall for the “Donate to help children in Ukraine” scam

Scammers are active during crises. ⚠️ Latest scam email encourages to donate for refugees. ⚠️ Earlier reports of a Microsoft-themed #phishing ("weird login attempts to your account") Stay vigilant and help through verified channels.

Go to article at
4.3.2022

Cyber attack attempts on Ukraine surge tenfold

Security company Defiant, protecting 8300 Ukrainian WP sites, is seeing a surge since invasion began: 🔺 on 25/2 144k daily attempts to exploit WP vulnerabilities (3x normal daily amount) 📈 on 28/2 10x normal daily amount #cybersecurity

Go to article at
4.3.2022