Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

ISMS implementation: comparison of documents, wikis, ISMS tools and GRC

There are a few different approaches to building an ISMS. In this post, we’ll compare these different methods, helping you understand which might be the best fit for your organization’s security management needs.

article

6.3.2025

What is Statement of Applicability (SoA) in ISO 27001?

In this blog, we'll cover the main purpose and benefits of a well-working Statement of Applicability document. We'll also explain why SoA is important, and 4 key roles it can play in information security work.

article

4.3.2025

Why is ISO 27001 compliance now more important than ever?

Year after year, ISO 27001 standard has remained one of the gold standards for information security. The global standard has remained relevant, but where did ISO 27001 originate? And why is it's popularity just going up?

article

27.2.2025

10 most common non-conformities in ISO 27001 audits

Audits and non-conformities drive organizations toward continuous improvement. But before your first ISO 27001 certification, it's good to be aware of some most common non-conformities, so you can avoid these in your certification audit.

article

18.2.2025

Got an ISO 27001 audit interview request - what should I expect?

In this blog, we will talk about the importance of employee participation in the audit interview process, why auditors value employee insights, and look into possible questions asked in an ISO 27001 interview.

article

13.2.2025

ISO 27001 compliance and certification checklist

Looking to ensure you fill ISO 27001 requirements? This checklist will present clearly ordered key steps that guide your organization in building an ISMS and getting compliant with the ISO 27001 standard.

article

6.2.2025

Most important documents in ISO 27001 certification audit

The ISO 27001 standard does specifically define some key documents, which need to be gathered together and be easily shareable e.g. for the auditor. In this blog, we'll present these most important documents for an ISO 27001 certification audit.

article

30.1.2025

NIS2 & national implementation: which local NIS2 laws are available in Cyberday?

EU Member States are required to adopt NIS2 into national law. Key national decisions include defining local authorities, monitoring mechanisms, and tailoring regulations to meet specific needs.

article

23.1.2025

Canada Charges Its “Most Prolific Cybercriminal”

31-year-old Canadian man has been arrested and charged with fraud in connection with numerous #ransomware attacks against businesses, government agencies and private citizens throughout Canada and the United States.

Go to article at
9.12.2021

2022 and the threat landscape: The top 5 future cybersecurity challenges

Continuous improvement is needed from security teams. Examples of 2022 #cybersecurity challenges: ⚠️ Zero trust adoption ⚠️ New 5G risks ⚠️ Evolving phishing strategies ⚠️ Misconf'd enterprise APIs used for lateral movement on attacks

Go to article at
9.12.2021

Ubiquiti breach an inside job, says FBI and DoJ

“Sharp exploited access as 'cloud lead' to steal gigabytes of company data, then, posing as an anon hacker, sent the company a nearly $2M ransom demand." Insider risks often not getting sufficient resources for mitigation. #cybersecurity

Go to article at
9.12.2021

SolarWinds Attackers Spotted Using New Tactics, Malware

Year after SolarWinds attacks, its orchestrators seem active again - looking for ways to spread through service providers to thousands of customers. New tactics seem to include e.g. 🦠 novel #malware (Ceeloader) and 🔓 MFA push abuse.

Go to article at
9.12.2021

Hackers all over the world are targeting Tasmania’s emergency services

#Cybersecurity: Attacks on police, fire, and medical services put lives on danger. Now Tasmania is targeted: ⚠️ 800 hack attempts in employee accounts ⚠️ CCTV compromised ⚠️ Website taken over for two weeks ⚠️ 2FA defeated in 5 occasions

Go to article at
3.12.2021

Nearly 600,000 open cybersecurity-related jobs were listed over 12 months

#Cybersecurity skills shortage research findings: 📈 Supply of workers only enough to fill 68% of jobs demanded 📈 Roles take 21% longer to fill than other IT jobs ⁉️ Few entry-level positions, lots of mid- to advanced-level hiring

Go to article at
3.12.2021

Interpol arrests over 1,000 suspects linked to cyber crime

HAEICHI-II operation caught 1003 cybercriminals, ranging from romance scams to investment frauds and money laundering. 💰Authorities also intercepted nearly 27 M$ and froze 2,350 banking accounts linked to online crimes. #cybersecurity

Go to article at
2.12.2021

Google Warns Crypto Miners Are Hacking Cloud Accounts

Cryptocurrency mining is a for-profit activity that requires large amounts of computing power. ⚠️ Google warns / reports, that 86% of recently compromised Google Cloud accounts were used for this. #cybersecurity

Go to article at
2.12.2021

Big salaries alone are not enough to hire good cybersecurity talent: What else can companies do?

Skills shortage gets worse. ISSA survey key findings from #cybersecurity employees: 🚩 62% face a heavier workload due to companies not being able to hire enough workers 🚩 38% feel burnt out Tips for recruiting cybersec talent >>

Go to article at
2.12.2021