Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.

Thanks! See you in your inbox on Fridays. :)

Unfortunately something went wrong. You can contact us at team@cyberdayai.

Recent #cybersecurity weekly digests

See full archive? Go to Weekly digests -page >>

🛡️ Cyberdigest: September round-up is published! 📰 What means cyber resilience? 👀

Published at

17:00

Open digest

🛡️ Cyberdigest: IT & OT Cubersecurity 🖥️ Admin webinar next week, will we see you there? 👉

Published at

17:00

Open digest

🛡️ Cyberdigest: Cyber Security in Supply Chain Risk Management 🛡️ We are at Cyber Security Nordic! ⭐️

Published at

17:01

Open digest

Webinars

See the full calendar? Go to Webinars-page >>

Coming up on:

Wednesday

30

.

5

.

at

14:00

Admin training (part 3/5): Risk management and security control implementation

Coming up on:

Wednesday

7

.

6

.

at

14:00

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Coming up on:

Wednesday

13

.

6

.

at

14:00

Admin training (part 4/5): Automating employee awareness, guidance and training

Coming up on:

Wednesday

21

.

6

.

at

15:00

ISO 27001 (part 3/5): Certification audit fundamentals

Coming up on:

Wednesday

9

.

8

.

at

14:00

Admin training (part 2/5): Framework selection and asset identification

Coming up on:

Wednesday

9

.

8

.

at

15:00

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Blog posts

Info of new posts? Subscribe now >>

Corporate Security Alert: Identifying Dangerous Apps on Employee Phones

This article uncovers hidden security risks of popular apps on work devices, covering social media, messaging, cloud storage, gaming, utility, health, VPN, and shopping apps, with recommendations to safeguard corporate data.

20.9.2024

NIS2 national legistation, ransomware and a new development forum: Cyberday product and news round-up 9/2024 🛡️

This is the September news and product review from Cyberday. Read news about ransomware, new phishing techniques and local NIS2-legistations.

20.9.2024

IT and OT Cyber Security: Different Environments, Different Priorities

This blog post outlines the key differences between IT and OT cyber security, focusing on their distinct areas, objectives, environments, threat landscapes, and compliance requirements.

4.9.2024

Cyber Security in Supply Chain Risk Management

Businesses should prioritize supply chain security by adopting best cyber security practices, fostering resilience, and promoting collaboration to protect against evolving cyber threats. Learn more about this topic in this blog post.

22.8.2024

Spreadsheet vs. ISMS tool - top 10 reasons why a tool is better than the traditional way

Discover the top 10 reasons why agile tools outperform traditional spreadsheets in managing cyber security compliance, from centralized management to continuous improvement.

22.8.2024

ISMS Essentials: Mastering a Data System Inventory for Your Organization

This post provides essential insights for maintaining a data system inventory within your organization's ISMS, detailing key processes, asset types, and tackling common challenges.

15.8.2024

Incident Detection: Building, Nurturing, and Continuously Improving a Proactive Environment

Shift from reactive to proactive incident detection. Use advanced tools, continuous learning, and customised strategies to anticipate and prevent issues. Focus on constant improvement and innovation to boost security and resilience.

15.8.2024

ISO 27001 and ISO 9001: Differences, how they work together and benefits of combining

Learn about the synergy between ISO 27001 and ISO 9001. Learn how integrating these standards enhances information security, quality management, and overall operational efficiency, using case examples and actionable insights.

6.6.2024

News articles

Get weekly news? Subscribe now >>

Illinois Hospital Closure Showcases Ransomware's Existential Threat

🏥 Illinois Hospital suffered a devastating #ransomware attack in 2021, forcing employees to pen&paper for months with no access to main IT systems. Now this hospital is ceasing operations permanently, due to this and other challenges.

Go to article at

Understanding Malware-as-a-Service

☢️ MaaS is a way for top cybercriminals to cash in, as they sell their malware to (often) less proficient attackers. At the same time it lowers the bar for entering #cybercrime community. Learn more about MaaS market >>

Go to article at

LockBit victims in the US alone paid over $90m in ransoms since 2020

⚠️ Seven nations (e.g. USA, UK, Germany) issued a joint security advisory about LockBit #ransomware gang. Advisory is a manual for identifying, stopping and reporting LockBit activity, which has cost > $90m for only US victims in 3 years.

Go to article at

People Are Pirating GPT-4 By Scraping Exposed API Keys

💳 To use OpenAI's LLMs (eg GPT-4), you need an OpenAI account w/ credit card. Some authors have left API keys exposed in their publicly accessible code - and now access to accounts with upto 150k$ usage are offered online. #cybercrime

Go to article at

New PowerDrop Malware Targeting U.S. Aerospace Industry

⚠️ Novel #malware found implanted in an unnamed domestic aerospace defense contractor last month. "PowerDrop uses advanced techniques to evade detection such as deception, encoding, and encryption" #cybersecurity #criticalinfra

Go to article at

7 tips for spotting a fake mobile app

📱 Many apps are after your money or personal data. Remember when downloading apps: ✅ Check the developer’s pedigree 📵 Look out for excessive app permissions Other similar tips for #cybersecurity in the article >>

Go to article at

Deepfake Cyber Attack Hits Russia: Fake Putin Message Broadcasted

📺 Hacker snuck in a fabricated message from Putin to russian radio and TV. Audio deepfakes are becoming very feasible with current tech. Convincing video deepfakes are more of a challenge, for now. #cybersecurity

Go to article at

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

Volt Typhoon is a state-sponsored actor, active since mid-2021 that targets critical infrastructure in the US. ➡️ This blog from MS describes their tactics for achieving / maintaining unauthorized access to target networks. #cybersecurity

Go to article at

OpenAI Leaders Call For Regulation To Prevent AI Destroying Humanity

ChatGPT founders call for a regulator to: ⚖️ place restrictions on AI 🔎 audit AI systems ✔️ test for compliance with safety standards in order to combat e.g. lock-in effects and becoming completely dependent on machines. #cybersecurity

Go to article at

Get started today

Start free, in your familiar Teams environment.
If you have some questions first, book a meeting with us.

Start free 14-day trial