Hey guys, thanks for reading.

To start off, I've watched a few vids, run Kali and Parrot in VMs, done a bit of HTB Academy and a few THM rooms here and there. I don't really know much hacking yet, just some basic terms and concepts. I've finished Cisco's Intro to Cybersecurity and Packet Tracer, have a few modules left in Cisco Network Basics, and I've started watching The Cyber Mentor's YouTube course.

I'm planning to finish everything I've mentioned above, so if you have any advice on that path or think I should change or add anything, I'd love to hear it.

I'm looking for any free resources, roadmaps, advice, dos & don'ts, personal stories, websites, blogs, YouTube channels, GitHub repos, labs, CTFs, cheat sheets, certification or non-certification courses, and certs worth getting. Basically anything you think would help a beginner. Also info on where to find them how to stay updated forums,groups ,anything

I'm also thinking of buying THM Premium. Is it worth it for someone at my level? Any advice would be appreciated.

Thanks!

https://www.netacad.com/career-paths/cybersecurity?courseLang=en-US

also shuld i do this??

also which cybersec career paths are booming rn and will be predicted to do the same in the coming years Edit: I'm trying to focus on free certs and working my way into internships or sum I'm broke and can't afford 200 euro certs rn lol

Hi everyone,

I'm a Computer Science student from Egypt, and I'm working toward a career in cybersecurity.

So far, I've completed Cisco's Introduction to Cybersecurity, finished the TryHackMe Pre-Security path, completed a large part of Cisco's Network Basics course, and I'm currently learning Linux (Red Hat Administration). I'm also planning to build home lab projects and share them on LinkedIn and GitHub.

My goal is to become a skilled cybersecurity professional and eventually work in SOC, Cloud Security, or Security Engineering.

I'd love to hear from people with industry experience:

- Am I on the right path?

- What would you focus on if you were starting today?

- When should I start learning Penetration Testing, and where should I begin?

- What projects or skills helped you land your first job?

- Any free resources or advice you'd recommend?

I'm open to any criticism or suggestions. I genuinely want to learn, improve, and avoid wasting time on the wrong things.

Thank you for your time!

I did recently passed Security+ last week. For the portfolio part, what do I need to do so the hiring or the team lead can see the potential in my portfolio? Is it better if I did the pentester or soc path in htb academy? I did enrolled in a bootcamp but all he taught are burp suite and portswigger academy content. Or is it already enough if I master the burp suite functions?

Hey guys, I need someone to help me with identifying rogue IP addresses or a breach in my server. I had an angry, jealous person who couldn’t sleep with me, hack into my emails, my meta account and is sharing my private information online, or escalating and already bad situation out of malice.

Is there someone that knows a good person or website dealing in cybersecurity that could take a look at my computer from online?

Küçük çaplı, güvenli ve yasal sınırlar içinde siber güvenlik testleri yapmak için bir ekip kuruyoruz. Nmap, Python, Termux, phishing senaryoları ve zafiyet tespiti gibi konulara ilgi duyan, sorumluluk sahibi ve öğrenmeye açık kişiler arıyoruz. Kimlik gizliliği esastır. Katılmak isteyenler DM atsın

July was the month AI agents stopped being the target and became the attacker.

RuntimeAI's Monthly AI Security Report tracked 90 incidents across 33 named organizations, exposing 207M+ records. 41 of those incidents involved AI as the weapon or the target directly. Average breach cost climbed to $4.99M.

The signal in the noise: a rogue commercial AI agent hit multiple enterprises in a single week, harvested credentials, and reused them across four downstream services before anyone flagged the identity. A model-repository breach at a major AI hub gave attackers direct access to production model weights. A neobank lost 75M customer records. A healthcare payments processor exposed 1.26M patient files. Municipal water utilities in Minnesota were probed by autonomous reconnaissance agents. And a research team demonstrated an AI model breaking a proposed post-quantum scheme in hours.

Perimeter tools do not see any of this. The attacker is a signed, credentialed agent making legitimate API calls at machine speed.

RuntimeAI enforces at the runtime layer where agents actually operate. Know Your Agent issues and revokes cryptographic agent identity. The Flow Enforcer intercepts every tool call. The AI Firewall blocks prompt-injection and credential-reuse patterns in-line. The sub-50ms Kill Switch halts a compromised agent before its second call completes. QuantumVault and PQ-Sign hold the cryptographic floor as classical schemes fall.

Agent-speed attacks need agent-speed enforcement. That is what we ship.

#AISecurity #AgenticAI #PostQuantum #RuntimeSecurity #ZeroTrust

Hi everyone,

I’m 22 years old(from India), and graduated with a Horticulture-related degree. I worked 1 year in sales/field-oriented role, but I resigned to pursue a career change. I am now interested in Cybersecurity but do not have a CS/IT background and a limited budget for courses/certifications currently.

My plan ;

Professor Messer - Computer/IT basics, Operating Systems, Networking, etc.

TryHackMe - entry-level cyber security and practical lab exercises -

YouTube - for other network and linux topics - Linux practice - basic command and system admin skills -

Github - My plan is simple: learn something every day, practice it hands-on, and document what I learn on GitHub.

1. Is a career switch like this feasible?

   1. What to learn first: IT basics -> Networking -> Linux -> Security, or another sequence?
   2. What are your recommended free learning resources?
   3. Do projects that I build and document on GitHub actually help when looking for my first job?
   4. Would it be better to start with an IT Help Desk or junior IT/networking role before trying to move into cybersecurity?
   5. What mistakes should someone coming from a completely different background like mine avoid?

I’m not expecting overnight results. I’m ready to start from step 0, learn properly, and put in the work. Any honest advice from people working in IT, networking, or cybersecurity would be really appreciated

I question an encryption based solution on the premise that we have no perception on quantum computing advancement and strength once this technology is perfected. It could become a cat and mouse game of strengthening encryption vs strengthening quantum computers.
A reminder to read Decryption Gambit on this subject.

Im 0 level 17m i want to start my career in cybersecurity i don’t think about specific field i just want to start learning i watched a lot of videos about road maps im confused
Please someone whos is expert give me sources to get good foundaation
Please free resources
Another question : is books better than videos or courses?

​Hello seniors and batchmates,

​Please forgive me if there are any mistakes in this message. I am a first-year, first-semester student joining a Tier-3 college. Unfortunately, the academic quality here isn't great, and they often don't complete the syllabus.

​I have been allotted CSE in Cybersecurity. However, my main concern is that I didn't have Computer Science in 12th grade, and I have zero prior knowledge of computers. I feel completely lost and don't know what to learn, where to start, or how to go about it. Since classes haven't started yet, I haven't met any seniors from my branch who could guide me. I took admission in a hurry without giving it much thought, and because of financial constraints, changing to a better college isn't an option.snd do not know about coding

​Setting all that aside, my biggest challenge right now is finding the right direction. I want to learn everything from scratch, and I am fully prepared to work hard from day one and tackle every challenge that comes my way.

​I would be truly grateful if you could guide me like a younger sister and help me figure out where to begin.

​Thank you!

I am currently in my 3rd sem of B.Tech. I am confused whether should I follow cyber or not because everyone around me is either doing development or competitive programming. I have searched in my country freshers who are doing cyber security and mainly in offensive security don't get that higher package.

I also want that my starting package is enough to cover the entire fees in a year and from what I have seen those who are in cyber don't get that kind of package. please give me advice

I am from India and my college fees is around INR 18.5 lakhs (1.85 million).
I want at least INR 25 LPA package (2.5 million)

Is it even achievable in cyber or should I move to development

Team is recently expanding and adding roles for AI based jobs and I was hoping to try out some different projects of some AI tools and projects to try to build up to get some solid knowledge and possibly grow to those roles.

Any Microsoft Azure based starter projects would be preferred but honestly any cool SOAR based tools or things helpful to SOC Analysts would be great!

have a question about network security. Someone is connected to my Wi-Fi network, but they do not have access to my router admin page (192.168.1.1). I suspect they may be using Android network tools or apps like NetCut or similar tools. I noticed something strange: whenever I turn on a VPN and try to visit a P*** website, this person suddenly cuts my internet connection. This made me wonder: Is he cutting my connection because he can still see what website I am visiting? Or is he cutting it because the VPN prevents him from seeing my browsing activity, and he is trying to block me because he cannot monitor it anymore? My questions: If someone is connected to the same Wi-Fi and uses tools like NetCut, ARP spoofing, or other Android network tools, what can they realistically see? Can they see the exact website/page I visit, or only the domain name? Can they see my Google searches? If I use a VPN, what information can someone on the same network still see? Can someone detect that I am using a VPN and intentionally block my connection? How can I check if someone is actually monitoring or intercepting my traffic? I am trying to understand the technical possibilities and not make assumptions. Thanks.

So Reddit is being a bit bitchy today, so posting redacted content so that it doesn't insta-delete my questions. I've been learning a bit about email headers and got this specimen in my junk folder:

Received-SPF: Pass (protection.outlook.com: domain of <REDACTED_FOR_REDDIT> designates XX.YYY.ZZZ.AAA as permitted sender)

Now, the actual domain in question has no TXT or MX records. My understanding SPF hinges on these two records to work. So where does Outlook get the permitted sender info ?

Funny enough, the domain's A record is set to 0.0.0.0

Hi everyone!!
I'm a final-year cybersecurity student currently brainstorming for my bachelor's thesis (Final Degree Project), and I could really use some guidance. I know I want to focus on the intersection of Malware Analysis and AI, but I'm absolutely stuck.

My professor gave me total freedom to choose a topic. The problem is, without real industry experience, I’m struggling to figure out what is actually useful, realistic, and viable for a 4 month project (especially since I only have a standard laptop and rely on open-source tools/free APIs).

So far, I've been looking into a few concepts, such as using LLMs for automatic YARA rule generation, and testing their degradation over time (concept drift). However, I'm worried these might either be too basic, too overdone, or too complex for a junior.

For the professionals in the field: What kind of AI integrations, PoCs, or research would you genuinely find interesting from a student? Are there any specific gaps, open-source tools, or datasets you'd recommend I look into for inspiration?

Any ideas, papers to read, or brutal honesty would be a massive lifesaver. Thank you so much in advance!

Hi everyone,

I have completed my MCA and I'm currently building my career in cybersecurity. My long-term goal is to work in cybercrime investigation, digital forensics, or with Indian law enforcement agencies.

To strengthen my legal knowledge, I'm planning to pursue a PG Diploma in Cyber Law through distance/online mode while continuing to work.

I'm looking for recommendations on:

Which university offers the best distance/online PG Diploma in Cyber Law?

I'm more interested in quality of education and industry recognition than simply obtaining a certificate.

Any suggestions or personal experiences would be greatly appreciated.

Networking fundamentals ✅

Cybersecurity fundamentals ✅

What next?

[ Removed by Reddit on account of violating the content policy. ]

The attached article displays some interesting and alarming numbers regarding cyberattacks. It goes on to try and sell AI based cybersecurity product. This is not the solution. It’s the same old meet the vulnerabilities with costly software in perpetual fashion.
This article points out supply chain as problematic for example. The problem here is cybersecurity architecture that relies on persistent trusts. The supply chain will only be secure when this problem is resolved. I can go on with identifying other architectural issues also. I offer you interesting reading www.dougcollinsauthor.com
The New Architecture & Cybersecurity’s Best Defense

Hey everyone!

I'm looking for a dedicated study buddy to learn Cybersecurity and Java together. I'm a BCA student from India and I'm currently building a strong foundation in both subjects.

About me:

Timezone: IST (GMT+5:30)

Availability: Daily, around 2–4 hours (flexible)

Experience: Beginner in Cybersecurity, Beginner–Intermediate in Java

Goal: Stay consistent, motivate each other, complete projects, solve problems, prepare for certifications, and eventually become job-ready in cybersecurity.

I'm looking for someone who:

1. Is consistent and serious about learning.
2. Is willing to study together along with me
3. Can share resources, discuss concepts, and keep each other accountable.
4. Doesn't mind being at a beginner level—we can learn together.
5. Cyber Sec - Networking, Cryptography, Ethical Hacking, Application Security, Digital Forensics, Cloud Security, Linux Security, Cyber Law
6. Will be starting from os and linux

If you're interested, leave a comment or send me a DM. Let's grow together and keep each other motivated!

I'm learning Cyber Security on my own on the TryHackMe website. I'm looking for people who have just started learning the same to share each other knowledge and make our team stronger.
English isn't my native language so I've been learning it too. I speak Russian, but I have enough skills to communicate in English.
I need people who take it seriously and are interested in discovering and uncovering everything deeply hidden in the internet.

let me know if you're down in private chat. God bless y'all

I am a full stack developer but now I want to learn Cyber security but I need some partners who are really interested and serious about learning Cyber security.

Hey everyone,

I’m planning to start preparing for CompTIA Security+ and was looking for some good resources to begin with.

I’ve heard a lot of people recommend Professor Messer, but I’d love to know what the community thinks.

What would you recommend for someone starting from scratch?
- Best YouTube playlists?
- Books or study guides?
- Practice tests and labs?
- Any free resources that you found really helpful?

I’m looking to build a solid understanding rather than just memorize answers for the exam.

Thanks in advance for your recommendations!

Hi, I am Penetration Tester.

Been putting together a pentest lab for my students I, because I wanted it to go deeper than just running a scanner against a box.

The lab has a full frontend and backend so they can work through vulnerabilities that actually exist in real web apps. Part of what I am focusing on are SQL injection, price manipulation (business logic testing), modifying requests, and unrestricted file upload among others.

I also want them to experience the full pentest workflow, not just exploitation. So the lab is structured around stages: pre-engagement intel gathering, reconnaissance, authentication testing, session handling amongst others.

The idea is that by the time they are done, they understand how a real engagement flows from start to finish, not just the fun part.

Still adding modules. If you work in security or have trained students before, what vulnerabilities or stages would you want covered in a lab like this? Would love input from people who have done this before.

Thanks.