Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Framework recap, US security & and role management: Cyberday product and news summary 3/2025 🛡️

The March product and news update presents updates to role management and the new Trust Center, a review of the key frameworks for 2025 and US security.

article

28.3.2025

Understanding DORA compliance: Key steps to prepare your organization

Understand DORA compliance and get a clear DORA requirements summary with key compliance areas, practical steps, and essential guidelines to strengthen your organization's digital resilience.

article

18.3.2025

ISMS implementation: comparison of documents, wikis, ISMS tools and GRC

There are a few different approaches to building an ISMS. In this post, we’ll compare these different methods, helping you understand which might be the best fit for your organization’s security management needs.

article

6.3.2025

What is Statement of Applicability (SoA) in ISO 27001?

In this blog, we'll cover the main purpose and benefits of a well-working Statement of Applicability document. We'll also explain why SoA is important, and 4 key roles it can play in information security work.

article

4.3.2025

Why is ISO 27001 compliance now more important than ever?

Year after year, ISO 27001 standard has remained one of the gold standards for information security. The global standard has remained relevant, but where did ISO 27001 originate? And why is it's popularity just going up?

article

27.2.2025

10 most common non-conformities in ISO 27001 audits

Audits and non-conformities drive organizations toward continuous improvement. But before your first ISO 27001 certification, it's good to be aware of some most common non-conformities, so you can avoid these in your certification audit.

article

18.2.2025

Got an ISO 27001 audit interview request - what should I expect?

In this blog, we will talk about the importance of employee participation in the audit interview process, why auditors value employee insights, and look into possible questions asked in an ISO 27001 interview.

article

13.2.2025

ISO 27001 compliance and certification checklist

Looking to ensure you fill ISO 27001 requirements? This checklist will present clearly ordered key steps that guide your organization in building an ISMS and getting compliant with the ISO 27001 standard.

article

6.2.2025

IT Giant Accenture Hit by LockBit Ransomware; Hackers Threaten to Leak Data

IT consulting giant Accenture ht by i#ransomware. Company says to have restored data from backups, but attackers threaten data publication. Last phase may well be blackmailing related Accenture clients. #cybersecurity

Go to article at
12.8.2021

SMBs increasingly vulnerable to ransomware, despite the perception they are too small to target

Report warns SMBs based current on #cybersecurity trends. ⚠️ Limited resources make SMBs turn to IT providers ⚠️ Supply-chain attacks are growing ⚠️ In these cases, one compromised IT provider can breach thousands of SMBs

Go to article at
11.8.2021

Korkeakoululle seuraamusmaksu tietosuojarikkomuksista työajanseurannassa kertyneiden sijaintitietojen käsittelyssä

Finnish school gets 25k€ fine and processing ban: Remote workers tracked hours with (voluntary) app, that gathered location data. Location processing was seen as contrary to requirement of necessity and data minimisation. #cybersecurity

Go to article at
11.8.2021

World Health Organization CISO suggests a holistic approach to cybersecurity

#Cybersecurity lessons from WHO's CISO after a challenging year: ✅ Importance of email security (eg DMARC) ✅ Phishing guidance and mandatory MFA for staff ⚠️ Only technology won't bring security, remember the role of people and processes

Go to article at
10.8.2021

With Crime-as-a-Service, anyone can be an attacker

CaaS = experienced cybercriminals sell access to the tools and information needed for scams. Its generalization is largely the reason why attacks are getting better and more targeted at small businesses as well. #cybersecurity

Go to article at
4.8.2021

This new phishing attack is 'sneakier than usual', Microsoft warns

MS warns 365 users of crafty #phishing messages that mimic a shared OneDrive file. Scams develop at a rapid pace. Comprehensive guidance / training for employees and extensive use of MFA as countermeasures. #cybersecurity

Go to article at
4.8.2021

Ransom demands reaching $1.2M, smaller companies increasingly targeted

#Ransomware a growing #cybersecurity threat for everyone: 🏢 Smaller companies increasingly targeted ⚠️ Avg. ransom demand 1,01M€ (+290% vs. 2020) ⚠️ New variants continuously (e.g. Mount Locker, HelloKitty, Conti)

Go to article at
4.8.2021

On course for a good hacking

The simplicity of hacking somewhere can be eye-openingly impressive. Spoiler: no master tech skills required. Read about how easily hackers could penetrate a premier golf club. #cybersecurity

Go to article at
4.8.2021

Nuisance call-blocking firm fined £170,000 for making almost 200,000 nuisance calls

ICO, the UK's data protection authority, fined a company for unsolicited direct marketing calls. What makes the case ironic is that the company itself sells call-blocking systems. Direct marketing can nowadays backfire. #cybersecurity

Go to article at
4.8.2021