Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

NIS2: Who's in the scope and what security measures are required? (part 2/3)

In this post you'll learn about what industries are affected by NIS2, security requirements the directive sets, and the available enforcement methods if an organization is not compliant.

article

23.8.2023

NIS2: Working towards compliance with Cyberday (3/3)

✈️ You want to lift your cyber security management to a new level & get NIS2 compliant with a smart tool like Cyberday? In this post you'll learn how your organization can achieve NIS2 compliance in a smart way by building an own agile ISMS.

article

23.8.2023

NIS2: Get familiar with the EU's new cyber security directive (part 1/3)

Learn about the background and reasons behind the EU's new Network and Information Security 2 (NIS2) Directive. How does it affect your company and how should you react to be compliant?

article

1.8.2023

SOC 2: Working towards compliance (1/2)

With the help of SOC 2, organisations can provide proof of effectively implemented controls and the use of best practices to protect the data to their customers and stakeholders, which may help to build trust.

article

31.7.2023

Personnel information security training and guidelines in Cyberday

Most data breaches start with human error. Still, investments in technical information security are often made more eagerly. We tell you why staff information security training and guidelines are important and how to implement then efficiently.

article

13.6.2023

Information security risk management in Cyberday: Identifying risks, evaluation, treatment and closure

Every cyber security framework highlights risk management in its own way. We summarize in this post, what's essential in information security risk management and what kind of an approach Cyberday offers for it.

article

13.6.2023

Become a Cyberday partner: Features, benefits and best practices

A good and efficient tool such as Cyberday is a great way to work on the organization's cyber secuirty. However, for some organizations that is not enough and the expertise and support of a consultant is needed. Our partner program offers both!

article

6.6.2023

Cyberday Community has been launched!

We just launched a new Community section inside Cyberday. Our goal is to make collaboration with your peers and with us easier and thus help you improve your information security even further!

article

24.3.2023

The “Great Cannon” has been deployed again

SummaryThe Great Cannon is a distributed denial of service tool (“DDoS”) that operates by injecting malicious Javascript into pages served from behind the Great Firewall. These scripts, potentially served to millions of users across the internet, hijack the users’ connections to make multiple requests against the targeted site.

Go to article at
15.5.2020
Denial-of-Service Attacks

Hackers are actively exploiting zero-days in several WordPress plugins

There's quite the WordPress p0wnage going on right now.

Go to article at
15.5.2020
Unpatched Vulnerabilities

Modern malware is increasingly leveraging evasive behaviors

Modern malware is increasingly leveraging evasive behaviors, a new report by VMware Carbon Black released at RSA Conference 2020 has revealed. The report uncovers the top attack tactics, techniques, and procedures (TTPs) seen over the last year and provides specific guidance on ransomware, commodity malware, wipers, access mining and destructive attacks. Among some of the key findings from the report: Defense evasion behavior was seen in more than 90 percent of the 2,000 samples they … More → The post Modern malware is increasingly leveraging evasive behaviors appeared first on Help Net Security.

Go to article at
15.5.2020
Malware

Is remote work the new normal?

As COVID-19 continues to spread, remote work is no longer an experiment, but a requirement in many nations. While it represents a huge change, the results of a research conducted by OnePoll and Citrix, reveal that a majority of employees around the world are adapting to working from home and believe it will become the new normal for the way work gets done. “Remote work is not business as usual. It represents a totally new … More → The post Is remote work the new normal? appeared first on Help Net Security.

Go to article at
15.5.2020
CyberNow

Blizzard hit by massive DDoS attack; EA Sports facing lagging issue

By Waqas Blizzard has been hit by massive DDoS attack - Here's what's happening and here's where its service is down... This is a post from HackRead.com Read the original post: Blizzard hit by massive DDoS attack; EA Sports facing lagging issue

Go to article at
15.5.2020
Denial-of-Service Attacks

HTC Mania - 1,488,089 breached accounts

In January 2020, the Spanish mobile phone forum HTC Mania suffered a data breach of the vBulletin based site. The incident exposed 1.5M member email addresses, usernames, IP addresses, dates of birth and salted MD5 password hashes and password histories. Data from the breach was subsequently redistributed on popular hacking websites.

Go to article at
15.5.2020
Illegal Personal Data Processing

Supply Chain Security Amid Coronavirus Fallout

As the impacts of the global spread of COVID-19 continue to be felt by businesses everywhere, one area that is increasingly strained is the supply chain. If your business has not already seen disruption to its supply chain, chances are a need to adjust planning and make accommodations for disruption are right around the corner... The post Supply Chain Security Amid Coronavirus Fallout appeared first on Security Boulevard.

Go to article at
15.5.2020
Supply Chain Attacks

Mixcloud Breach Hits Millions of Users

British streaming service the latest to suffer major security incident

Go to article at
15.5.2020
Password Attacks

Nedbank client data hack – The security problems at Computer Facilities

In addition to weak passwords, a researcher also found several old security vulnerabilities on Computer Facilities’ web servers.

Go to article at
15.5.2020
Illegal Personal Data Processing