Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: Physical Security in cybersecurity 🏢 Phishing risks in christmas shopping?🛍️

Published at

17:02

Open digest

🛡️ Cyberdigest: Introduction to DORA framework ⭐️ Check out our webinars! 💻

Published at

17:01

Open digest

🛡️ Cyberdigest: Debriefing of the CSN 2024 + hot topics in cybersecurity 🔥🛡️ Smart appliance = surveillance? 👀

Published at

17:05

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

NIS2: Who's in the scope and what security measures are required? (part 2/3)

In this post you'll learn about what industries are affected by NIS2, security requirements the directive sets, and the available enforcement methods if an organization is not compliant.

23.8.2023

NIS2: Working towards compliance with Cyberday (3/3)

✈️ You want to lift your cyber security management to a new level & get NIS2 compliant with a smart tool like Cyberday? In this post you'll learn how your organization can achieve NIS2 compliance in a smart way by building an own agile ISMS.

23.8.2023

NIS2: Get familiar with the EU's new cyber security directive (part 1/3)

Learn about the background and reasons behind the EU's new Network and Information Security 2 (NIS2) Directive. How does it affect your company and how should you react to be compliant?

1.8.2023

SOC 2: Working towards compliance

With the help of SOC 2, organisations can provide proof of effectively implemented controls and the use of best practices to protect the data to their customers and stakeholders, which may help to build trust.

31.7.2023

Personnel information security training and guidelines in Cyberday

Most data breaches start with human error. Still, investments in technical information security are often made more eagerly. We tell you why staff information security training and guidelines are important and how to implement then efficiently.

13.6.2023

Information security risk management in Cyberday: Identifying risks, evaluation, treatment and closure

Every cyber security framework highlights risk management in its own way. We summarize in this post, what's essential in information security risk management and what kind of an approach Cyberday offers for it.

13.6.2023

Become a Cyberday partner: Features, benefits and best practices

A good and efficient tool such as Cyberday is a great way to work on the organization's cyber secuirty. However, for some organizations that is not enough and the expertise and support of a consultant is needed. Our partner program offers both!

6.6.2023

Cyberday Community has been launched!

We just launched a new Community section inside Cyberday. Our goal is to make collaboration with your peers and with us easier and thus help you improve your information security even further!

24.3.2023

News articles

Get weekly news? Subscribe now >>

Meet Borat RAT, a New Unique Triple Threat

RAT #malware typically helps attacker gain control of a system, permitting access to network resources, files, and control mouse and keyboard. ☣️ Borat RAT goes beyond - deploying ransomware and DDoS attacks. Learn more from article >>

Go to article at

Over 80,000 exploitable Hikvision cameras exposed online

Researchers discovered 80,000 Hikvision cameras w/ command injection #vulnerability - easily exploitable by sending specially crafted messages to server. ⚠️ Patch available for months, but thousands of organizations have not applied it.

Go to article at

How a spoofed email passed the SPF check and landed in my inbox

📧 SPF lets you publish DNS records to define IPs allowed to use the domain for sending email. Article explains this must-have safeguard + examples where careless SPF records allowed bad actors to impersonate a corporation. #phishing

Go to article at

Exploit out for critical Realtek flaw affecting many networking devices

⚠️ Exploit code released, zero-click #vulnerability (CVSS 9.8/10) affecting millions of devices with Realtek’s RTL819x SoC. Attacker can compromise e.g. routers from many brands. Patch available - check if your equipment is vulnerable.

Go to article at

RubyGems now requires multi-factor auth for top package maintainers

Software package registry RubyGems requires top admins to secure accounts w/ MFA. Registries like PyPI and npm are doing the same. ⚠️ This relates to growing trend, where criminals steal accounts to publish rogue software. #cybersecurity

Go to article at

U.K. Water Supplier Hit With Clop Ransomware Attack

⚠️ U.K. water supplier hit by Clop #ransomware. Attack didn't stop water supply. As ransom wasn't paid, breached data (incl. passports, data system screenshots) was published. Trend continues: critical infra a top target for cybercrime.

Go to article at

Ransomware, email compromise are top security threats, but deepfakes increase

#Cybersecurity threat reports (2021-2022) from VMware and Palo Alto Unit 42: ☢️ Most common threats: Ransomware, business email compromise (BEC) 📈 Increasing rapidly: Deepfakes, zero-day vulnerability exploits, API hacks

Go to article at

The Security Pros and Cons of Using Email Aliases

📧 Some users tame their inbox with +app email aliases. Using these can make you the first to know about a breach or leak, if u start receiving mail to an app's alias! Downside is the format might not work on all services. #cybersecurity

Go to article at

10 Credential Stealing Python Libraries Found on PyPI Repository

⚠️ Growing #cybersecurity threat - bad actors publish rogue software on popular public repositories. Now 10 modules removed from Python Package Index (PyPI) that harvest critical data (e.g. passwords, API tokens). Details in article >>

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial