Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Most important documents in ISO 27001 certification audit

The ISO 27001 standard does specifically define some key documents, which need to be gathered together and be easily shareable e.g. for the auditor. In this blog, we'll present these most important documents for an ISO 27001 certification audit.

article

30.1.2025

NIS2 & national implementation: which local NIS2 laws are available in Cyberday?

EU Member States are required to adopt NIS2 into national law. Key national decisions include defining local authorities, monitoring mechanisms, and tailoring regulations to meet specific needs.

article

23.1.2025

ISO 27001 certification: What happens in the certification audit?

Learn about ISO 27001 certification audits, including the process, stages, and what auditors evaluate. Find out how to prepare and what to expect.

article

22.1.2025

What is ISO 27001? Intro to the global information security gold standard.

Whether you're new to ISO 27001 or looking to strengthen your current practices, this post will walk you through its essentials, why it matters, and how it can improve your approach to information security.

article

22.1.2025

Password Security: Avoid these 5 common mistakes

Password security is something that no one should underestimate in the face of today's threats. One sensible option for secure password management is to use software designed for this purpose.

article

16.1.2025

Framework recap, role of the CISO & and vendor assessments: Cyberday product and news round-up 12/2024 🛡️

December's product and news round-up will showcase the vendor security assessments and new enterprise-level features, an overview of the key frameworks for 2025 and the roles of the CISO and personnel in an organisation's security.

article

19.12.2024

Europe's Compliance Revolution: Evolving Cyber Sec Consulting

The evolving cyber sec landscape and growing demand for compliance in combination with a shortage of professionals calls for new ways of working. With the help of partnerships and agile tools, consultants can benefit from the current situation.

article

18.12.2024

TISAX: Understanding the Automotive framework

By embracing TISAX, automotive industry operators can improve information security, enhance compliance and strengthen their market position. Read more about TISAX, its scope, requirements and how ISO 27001 fits in.

article

3.12.2024

Many organizations lack basic cyber hygiene despite high confidence in their cyber defenses

SpyCloud researched organizations' #cybersecurity level: ⚠️ 81% felt that their level was good / excellent 🛑 41% did not have clear password policies 🛑 44% did not use MFA ⚡ Emails with malicious attachments / links seen as #1 threat

Go to article at
21.10.2021

October is high season for cyberattacks, Infosec Institute study shows

October is Europe's #cybersecurity month, but also a busy time for cyber attacks. Research results: 📈 2016-2020 growth in attacks + 283% 📈 About 20% of attacks in October 💡 Invest in training, patching, access control and MFA

Go to article at
15.10.2021

How Coinbase Phishers Steal One-Time Passwords

⚠️ One-time passwords (OTPs), such as authenticator codes, were quite successfully stolen in #phishing campaign targeting Coinbase users. Always important to guide people on how to verify the actual site domain from browser address bar.

Go to article at
15.10.2021

Phishing Campaign Uses Mathematical Symbols to Trick AI-based Spam Detectors

📨 In a “New eVoice” phishing email impersonating Verizon, the letter V of the logo had been replaced with nearby symbols (e.g. ✔️) so that AI-based security systems would not detect the brand impersonation. #cybersecurity

Go to article at
14.10.2021

Microsoft Fended Off a Record 2.4 Tbps DDoS Attack Targeting Azure Customers

DDoS attack on Azure environment came from a botnet of estimated 70,000 "infected devices". ⚠️ Growing attacks (lately also Yandex) tell of a frightening ability to overwhelm a desired service with huge traffic. #cybersecurity

Go to article at
14.10.2021

Why Does The Internet Keep Breaking?

As part of "routine maintenance", engineers accidentally disconnected Facebook data centres from the wider internet. ⚠️ Reliance on few companies to deliver huge portion of Internet is making global outages more frequent. #cybersecurity

Go to article at
14.10.2021

Ransomware operators behind hundreds of attacks arrested in Ukraine

🚨 2 ransomware gang members arrested, w/ 100 attacks and $150 million in damages - face up to 12 years in prison. Authorities increasingly target individual members as a way to disrupt gang's activities and spread fear. #cybersecurity

Go to article at
8.10.2021

Ransomware: what protects against it best? | Kaspersky official blog

🧪 AV-TEST tested some eading ransomware solutions. 3 scenarios and 113 attack samples brought protection results from 33% - 100%. All security solutions promise to deliver, but in practice work quite differently. #cybersecurity

Go to article at
8.10.2021

Creating Wireless Signals with Ethernet Cable to Steal Data from Air-Gapped Systems

Example of interesting data exfiltration mechanism, "LANtenna Attack": 📡 employs Ethernet cables as a "transmitting antenna" to stealthily siphon highly-sensitive data from air-gapped systems #cybersecurity

Go to article at
8.10.2021