Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Framework recap, US security & and role management: Cyberday product and news summary 3/2025 🛡️

The March product and news update presents updates to role management and the new Trust Center, a review of the key frameworks for 2025 and US security.

article

28.3.2025

Understanding DORA compliance: Key steps to prepare your organization

Understand DORA compliance and get a clear DORA requirements summary with key compliance areas, practical steps, and essential guidelines to strengthen your organization's digital resilience.

article

18.3.2025

ISMS implementation: comparison of documents, wikis, ISMS tools and GRC

There are a few different approaches to building an ISMS. In this post, we’ll compare these different methods, helping you understand which might be the best fit for your organization’s security management needs.

article

6.3.2025

What is Statement of Applicability (SoA) in ISO 27001?

In this blog, we'll cover the main purpose and benefits of a well-working Statement of Applicability document. We'll also explain why SoA is important, and 4 key roles it can play in information security work.

article

4.3.2025

Why is ISO 27001 compliance now more important than ever?

Year after year, ISO 27001 standard has remained one of the gold standards for information security. The global standard has remained relevant, but where did ISO 27001 originate? And why is it's popularity just going up?

article

27.2.2025

10 most common non-conformities in ISO 27001 audits

Audits and non-conformities drive organizations toward continuous improvement. But before your first ISO 27001 certification, it's good to be aware of some most common non-conformities, so you can avoid these in your certification audit.

article

18.2.2025

Got an ISO 27001 audit interview request - what should I expect?

In this blog, we will talk about the importance of employee participation in the audit interview process, why auditors value employee insights, and look into possible questions asked in an ISO 27001 interview.

article

13.2.2025

ISO 27001 compliance and certification checklist

Looking to ensure you fill ISO 27001 requirements? This checklist will present clearly ordered key steps that guide your organization in building an ISMS and getting compliant with the ISO 27001 standard.

article

6.2.2025

Study shows prominent apps are selling your data to 3rd parties

By Sudais Asif Among the various categories of apps that exist out there, some by their nature store more of your personal information as compared to others. This is a post from HackRead.com Read the original post: Study shows prominent apps are selling your data to 3rd parties

Go to article at
15.5.2020
Illegal Personal Data Processing

School's out as ransomware attack downs IT systems at Scotland's Dundee and Angus College

A further education college in east Scotland has been struck by what its principal described as a cyber "bomb" in an apparent ransomware attack so bad that students have been told to stay away and reset passwords en masse. Dundee and Angus College told students not to turn up after the ransomware seemingly downed the entire institution's IT systems. This includes classes for college students, school pupils, evening classes and also means student interviews will not take place. However, all students are required to reset their passwords before they can access College systems such as MyLearning. Dundee and Angus College has about 5,000 registered students. A student affected by the attack told The Register: "We cannot access any college systems... the intranet that contains learning resources for all course materials has been offline for some since Thursday."

Go to article at
15.5.2020
Ransomware

Fake Jobs: Cybercriminals Prey on Job Seekers via Fake Job Postings

The FBI reports that fake job listings get people to hand over personal information to cybercriminals and results in an average financial loss of $3,000 per victim Earn $10,000 a... The post Fake Jobs: Cybercriminals Prey on Job Seekers via Fake Job Postings appeared first on Hashed Out by The SSL Store™. The post Fake Jobs: Cybercriminals Prey on Job Seekers via Fake Job Postings appeared first on Security Boulevard.

Go to article at
15.5.2020
Phishing

FBI: BEC scams accounted for half of the cyber-crime losses in 2019

Average loss per BEC scam amounted to nearly $75,000, per complaint, on average.

Go to article at
15.5.2020
Business-Email-Compromise

New Insights into Privileged Access Management (PAM) Best Practices

The increasingly sophisticated and persistent nature of cyber threats underscores the importance of protecting your privileged accounts, along with their respective privileged users and privileged credentials. Privileged accounts, by their very nature, tend to be the sort of digital “crown jewels” that are much sought-after by hackers. Best practices for Privileged Access Management (PAM), the […] The post New Insights into Privileged Access Management (PAM) Best Practices appeared first on Hysolate. The post New Insights into Privileged Access Management (PAM) Best Practices appeared first on Security Boulevard.

Go to article at
15.5.2020
Outdated Access Rights

Microsoft Buys Corp.com So Bad Guys Can’t

Whoever controls corp.com can passively intercept private communications from hundreds of thousands of computers that use this “corp” designation in their Active Directory domain.

Go to article at
15.5.2020
CyberNow

Googlers Fired for Breaking Security Policy

Supporters say sacking was motivated by their union activity

Go to article at
15.5.2020
Employee Negligence

December cyber attack costs New Orleans $7 million, so far

A ransomware attack targeting the city of New Orleans has inflicted $7 million in losses so far, with more to be incurred in coming months, Mayor Latoya Cantrell said in a recent update. At 5 a.m. on December 13, New Orleans was becoming the latest victim in a long string of ransomware attacks directed as […] The post December cyber attack costs New Orleans $7 million, so far appeared first on Security Boulevard.

Go to article at
15.5.2020
Ransomware

Convicted murderer wins ‘right to be forgotten’ case

Google must remove details of a convicted murderer from its search results in Europe following a German court ruling, it emerged last week.

Go to article at
15.5.2020
Violations of Data Subject Rights