Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Encryption, RaaS, supply chain attacks: Monthly Cyberday product and news roundup 12/2023 🛡️

In December's summary, development themes include UI updates and information security statements. On the news side talk about encryption, RaaS and supply chain attacks.

article

15.12.2023

How do you benefit from ISO 27001 certification?

Why do organizations choose to go for ISO 27001 certification? In this blog article, we will give you our top 5 reasons to get certified. Certification will certainly benefit your security directly, but there are other kind of benefits available too.

article

25.10.2023

Working towards NIS2 compliance with Cyberday

✈️ You want to lift your cyber security management to a new level & get NIS2 compliant with a smart tool like Cyberday? In this post you'll learn how your organization can achieve NIS2 compliance in a smart way by building an own agile ISMS.

article

23.8.2023

Who does NIS2 apply to? Scope and required security measures explained.

In this post you'll learn about what industries are affected by NIS2, security requirements the directive sets, and the available enforcement methods if an organization is not compliant.

article

23.8.2023

What is NIS2 directive? Know EU's new cyber security legislation

Learn what is the new EU NIS2 directive, why the original NIS was not enough and how it affects your company's compliance requirements.

article

1.8.2023

SOC 2: Working towards compliance

With the help of SOC 2, organisations can provide proof of effectively implemented controls and the use of best practices to protect the data to their customers and stakeholders, which may help to build trust.

article

31.7.2023

Personnel information security training and guidelines in Cyberday

Most data breaches start with human error. Still, investments in technical information security are often made more eagerly. We tell you why staff information security training and guidelines are important and how to implement then efficiently.

article

13.6.2023

Information security risk management in Cyberday: Identifying risks, evaluation, treatment and closure

Every cyber security framework highlights risk management in its own way. We summarize in this post, what's essential in information security risk management and what kind of an approach Cyberday offers for it.

article

13.6.2023

GoDaddy admits to password breach: check your Managed WordPress site!

GoDaddy #cybersecurity breach: ⚠️ 1,2M managed WP sites affected ⚠️ Crooks in its network for 6 weeks ⚠️ sFTP and database passwords leaked (no encryption reported!) ⚠️ SSL/TLS private keys leaked What-to-do's on the article >>

Go to article at
23.11.2021

Emotet malware is back and rebuilding its botnet via TrickBot

In early 2021 Europol and Eurojust took over the Emotet infrastructure and arrested two individuals. ⚠️ Now researchers see signs of Emotet activity increasing. Takedown hasn't prevented the adversaries from bringing the #malware back.

Go to article at
19.11.2021

FBI's Email System Hacked to Send Out Fake Cyber Security Alert to Thousands

⚠️ FBI server was hijacked and 100,000 people were alerted of a fake cyber attack. An embarrassing case that could have been a lot worse if, instead of "trolling", the threat actor would have been #phishing or distributing malware.

Go to article at
19.11.2021

SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts

🕵️ Researchers on Monday reported a new Android trojan called SharkBot. #Malware masquarades as media player and uses accessibility features (intended to assist people with disabilities) to e.g. steal banking and crypto app credentials.

Go to article at
19.11.2021

'PerSwaysion' Phishing Campaign Still Ongoing, and Pervasive

The PerSwaysion #phishing kit has been used in thousands of attacks around the world - and is still active. The scams utilize Microsoft's file-sharing services (e.g. SharePoint) to trick people into credential-stealing sites.

Go to article at
19.11.2021

This Mysterious Malware Could Threaten Millions Of Routers And IoT Devices

Researchers have identified a new BotenaGo #malware that targets e.g. routers and IoT devices, exploiting over 30 different vulnerabilities. Good protection practices include prompt security updates and a well-maintained firewall.

Go to article at
18.11.2021

Fishing Gear Seller Caught In Hacker's Net

⚠️ UK's biggest fishing shop suffefing a cyber attack. Experts tell signs point to employee login credentials having been stolen, allowing the hackers to take over company website and Twitter account. #cybersecurity

Go to article at
11.11.2021

Phishing attacks grow 31.5% over 2020, social media attacks continue to climb

Other important numbers from PhishLabs report: 📈 51.6% of credential stealing #phishing targeted O365 logins 📈 82% increase in social media attacks during 2021 📈 Amount of vishing attacks more than doubled during Q2 and Q3/2021

Go to article at
11.11.2021

Robinhood discloses data breach impacting 7 million customers

🚨 A threat actor called stock trading platform's customer support and was able to obtain access to customer support systems through social engineering. This resulted in a data breach impacting 7 million customers. #cybersecurity

Go to article at
10.11.2021