Copy
Share Share
Tweet Tweet
Share Share
Forward to friend Forward to friend

👋 Help us in sharing the cyber security awareness. Thanks!

Weekly #cybersecurity digest

Greetings <<First Name>>! This newsletter brings to your inbox every Friday:
🗞️ this week's most important cyber security news, 📅 next week's upcoming webinar trainings and 🛡️ most recent Cyberday development.

Published 27.1.2023 • Read all @ Cyberday.ai

#WeStandWithUkraine 🇺🇦

WEEK'S MOST IMPORTANT CYBER SECURITY NEWS

Near-Record Year for US Data Breaches in 2022

Takeways on ITRC's US data breaches in 2022 report: ⚠️ Only 34% of breach notices incl victim and attack details. Hard for people to estimate their risk. Other info: 👥 422 million affected 🎣 Phishing and #ransomware popular vectors

27.1. 10:50 · https://www.infosecurity-magazine.com/news/nearrecord-year-us-data-breaches/

Hunting Insider Threats on the Dark Web

💣 Malicious employees cause 20% of incidents. Insider attacks are on avg. 10x larger. Companies can spot threats by spotting crooks after insider knowledge or disgruntled employees' unsavory comments - also on dark web. #cybersecurity

27.1. 10:47 · https://www.darkreading.com/threat-intelligence/hunting-insider-threats-on-the-dark-web

Supply chain attacks caused more data compromises than malware

Steady increase on data breaches on 2nd half of 2022. ⚠️ Attacks on supply chains are becoming a big trend: - Supply chain attacks affected 10+ million people - #Malware-based attacks affected 4.3 million people

27.1. 10:42 · https://www.helpnetsecurity.com/2023/01/26/data-compromises-2022/

New Python-based RAT Uses WebSockets for C2 and Data Exfiltration

☣️ New #malware dubbed PY#RATION is allowing threat actors to harvest sensitive information. "Malware is unique in its utilization of WebSockets to avoid detection, communicate and exfiltrate data." Attack details in article >>

27.1. 10:39 · https://thehackernews.com/2023/01/pyration-new-python-based-rat-utilizes.html

Zendesk Hacked After Employees Fall for Phishing Attack

Zendesk informed customers of a breach resulting from employee credentials stolen in "sophisticated sms #phishing campaign". No public notice yet. Attack may be the same that already hit e.g. Twilio and Cloudflare before. #cybersecurity

27.1. 10:37 · https://www.securityweek.com/zendesk-hacked-after-employees-fall-for-phishing-attack/

NEXT WEEK'S CYBER SECURITY WEBINARS

Admin training (part 4/5): Automated staff training and guidance

We will present creating an automatized personnel cyber security guidance and training process.

Aleksi Pulkkanen
Starts on Wed 1.2. at 2PM (EET) · duration 30 min

ISO 27001 (part 2/5): Security controls, risk management and SoA

We will present the basics of risk management, defining security controls and utilizing the statement of applicability.

Aleksi Pulkkanen
Starts on Wed 1.2. at 3PM (EET) · duration 45 min

ISO 27001 (part 1/5): Intro to standard and Cyberday ISMS

We will go through the basics of Cyberday and how ISO 27001 standard can support systematic information security management. We will also cover the 2022 update to the standard.

Aleksi Pulkkanen
Starts on Wed 8.2. at 3PM (EET) · duration 45 min

NEWS FROM CYBERDAY DEVELOPMENT TEAM

new feature

Coming up: Community-section in Cyberday

We're building a new Community-section to Cyberday, which will enable you to easily ask help from us, collaborate with your peers from similar roles / organizations and get ideas...

new feature

Quick search in Cyberday

We have published a global quick search for Cyberday, which helps an admin to easily jump to the item he is looking for, whether it is a list, a report or any individual item...

small improvement

"Login with Microsoft" on web UI

You can now also use your own Microsoft 365 credentials to log in to our browser interface.

All content @ cyberday.ai

Facebook
Twitter
LinkedIn
Website
Email
Privacy notice | Update preferences | Unsubscribe 

© 2023 Agendium Ltd. All rights reserved. Cyberday.ai | Agendium Ltd, Kalevantie 2, 33100 Tampere, Finland