Tech Skills
Cybersecurity
Ethical hacking, penetration testing, network security, CTFs and defensive security
Skills in this topic
8 skills — Sign in to track your progress
Security Basics
beginner
Fix OWASP top 10 vulnerabilities
AI Security
intermediate
Identify and patch prompt injection vulnerabilities
Network Security
intermediate
Configure a firewall with proper inbound/outbound rules
Ethical Hacking & Pen Testing
intermediate
Conduct a full pen test with Kali Linux
Cloud Security
intermediate
Implement IAM least-privilege policies on AWS/GCP
Incident Response
intermediate
Build an incident response playbook
Security Compliance
intermediate
Map controls for SOC 2 Type II compliance
Defensive AI
advanced
Build an AI-powered log anomaly detector
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Breaking the Filter: How I Unlocked Hidden Application Data via SQL Injection
When building or working with enterprise applications, we often rely on database logic to enforce business rules. For example, ensuring… Continue reading on Med
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
OverTheWire Bandit Walkthrough — Level 22 → 23 | 30-Day Cybersecurity Learning Journey (Day 22)
Reading a cron script that uses dynamic MD5-hashed filenames and why understanding scripting logic rather than just following instructions… Continue reading on
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Your Business Firewall is Probably Lying to You (Here’s Why Charlotte Companies are Switching to…
Most business owners treat their network firewall like a smoke detector. You buy it, you stick it on the ceiling (or in the server closet)… Continue reading on
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
One Pixel Off: My Second Clickjacking Lab on PortSwigger
After getting through the first clickjacking lab, I moved to a slightly more advanced variant: this one prefills a form value straight… Continue reading on Medi
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Hiding in Plain Sight: My First Clickjacking Lab on PortSwigger
After finishing all nine labs in the XSS track, I moved on to a completely different category: Clickjacking. This first lab pairs a delete… Continue reading on
Medium · Data Science
🔐 Cybersecurity
⚡ AI Lesson
2w ago
The Letters You Send Today Could Be Read in 2035. Someone Is Already Saving Them.
Somewhere right now, a government is collecting your encrypted data without breaking it. Continue reading on Medium »
Medium · DevOps
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Wazuh Ansible Series Part 9: Custom Malware Detection with YARA Scheduled Scanning
How I built a YARA scanning pipeline that catches what ClamAV misses — droppers, secret-exfil helpers, encoded launchers, and… Continue reading on Medium »
Reddit r/cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Feeling stressed and overwhelmed
Iwant to tell you that i am on cybersecurity 101 path in tryhackme and the thing is whatever i studied until room "Blue", ik what i studied but i couldn't memor
Medium · Python
🔐 Cybersecurity
⚡ AI Lesson
2w ago
O Perigo Silencioso das Portas Abertas: O que o mapeamento de rede revela sobre a sua superfície de…
Por que desenvolver um Port Scanner do zero me ensinou mais sobre Risco e Governança do que rodar ferramentas prontas. Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
O Perigo Silencioso das Portas Abertas: O que o mapeamento de rede revela sobre a sua superfície de…
Por que desenvolver um Port Scanner do zero me ensinou mais sobre Risco e Governança do que rodar ferramentas prontas. Continue reading on Medium »
Reddit r/cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Valuation of Privilege Escalation Exploits through popular software on Windows
What's the valuation if I happen to find a Local Permission Escalation zero-day that allows a user to get admin/system Privilege using a popular software (Not c
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Authentication Bypass & Information Disclosure in a Fortune 500 Consumer Goods Company’s External…
Author: Juliana Fragetti Rbeiro Lima Date: May 2026 Program: VDP (Vulnerability Disclosure Program) — Major Beverage Corporation… Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Total System Dominance: Chaining RFID, Sub-GHz, and Infrared Exploits
The amateur hits one vector. The professional chains them all and walks out before the alarm even thinks about ringing. Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Kioptrix Level 1: My First Introduction to Pentesting
How I pwned the Kioptrix Level 1 virtual machine! Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Here’s How I Make Windows a LOT More Private Out of the Box
A step-by-step guide to reducing what Windows 11 tracks Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Securing React Native Apps: A Comprehensive DevSecOps Pipeline
Mobile app security is very different from web security. Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
How a Race Condition in a Loyalty Wallet Scored a $15,000 Critical Payout
We’ve all seen standard web vulnerabilities like cross-site scripting (XSS) or SQL injection. But some of the most lucrative bugs don’t… Continue reading on Med
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
CMMC Consultant vs. Compliance Software: How to Know What Your Organization Really Needs
Defense contractors are facing more pressure than ever to prove cybersecurity readiness without wasting time, overspending, or walking… Continue reading on Medi
Forbes Innovation
🔐 Cybersecurity
⚡ AI Lesson
2w ago
App Safety Red Flags: Warning Signs Users Shouldn’t Ignore
A polished interface, strong rating or confident privacy claim can make an app look trustworthy, but those signals don’t always tell the full story.
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
IPVanish handed the FBI its user logs. The user had no idea.
In 2016, a VPN provider called IPVanish delivered detailed connection logs to federal investigators — timestamps, IP addresses, session… Continue reading on Med
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
My 14-Year-Old MacBook Still Works. Why Does Software Decide When Hardware Dies?
A decade-old MacBook Pro reveals an uncomfortable truth: devices often become obsolete not because they stop working, but because software… Continue reading on
Reddit r/cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Mailing list for cves on random products I use?
Is there any way to basucally add a list of relatively obscure software (eg browser extensions) and be informed if a cve is exposed? I have a few browser extens
Forbes Innovation
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Using Football Passwords Is A Huge Own Goal
Passwords containing football player or club names can be cracked in milliseconds, warn security researchers.
Reddit r/cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
ShapedPlugin supply-chain attack backdoored Pro plugin updates, stealing credentials and 2FA secrets
Attackers backdoored ShapedPlugin Pro updates, deploying malware that steals credentials, 2FA secrets, and grants full site access. https://securityaffairs.com/
Reddit r/cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
BBC News: How 100 hospitals switched to pen and paper to defeat a national cyber-attack. New 10 min youtube doc about the massive hack that Romania coped with surprisingly well:
https://www.youtube.com/watch?v=WxY6aLRVgcI&t=204s submitted by /u/tides977 [link] <a href="https://www.reddit.com/r/cybersecurity/comments/1udc9ss/bbc_news
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Healthcare Data Security Under Pressure as Xsolis Breach Impacts 1.4 Million Individuals
The healthcare sector continues to face growing cybersecurity challenges as another large-scale data breach highlights the risks… Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Intent Doesn’t Lie. How TIKOS® Stopped Every Prompt Injection
How TIKOS® Stopped Every Prompt Injection In A Critical System Analysing LLM Internals. Continue reading on Tikos Tech »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Why Weak Passwords Still Win: Lessons from a Hydra Brute-Force Exercise
Cybersecurity is one of those fields where reading about attacks and actually performing them in a controlled environment are two… Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
The Hackers Hiding Their Commands in the Internet’s Phone Book
A new backdoor called Dohdoor doesn’t connect to a suspicious server. Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
How to get a VPN free trial: Test risk-free before you buy
Want to test a VPN before paying? Learn how to get a free VPN trial, what to look for, and which providers offer the best free trials. Continue reading on Mediu
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Who Caught Whom?
On the morning of one of the blessed Fridays, I received a high-severity alert on the SIEM (Security Information and Event Management)… Continue reading on Medi
Reddit r/cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Are open source EDRs any good?
Asking as a freelancer looking to offer monitoring services to clients. One of the things I want to do is be able to offer clients an EDR solution so I can moni
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
From Isolated Indicators to Campaign-Level Scam Intelligence
Most scam response still begins with isolated indicators: a suspicious URL, a phone number, a fake profile, a screenshot, a… Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Top 10 Cybersecurity Best Practices Every Company Should Follow
Meta Title: Top 10 Cybersecurity Best Practices Every Company Should Follow Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Build a Tiny Container Without Docker: Understanding Containers From First Principles (P3)
A beginner-friendly but deep dive into building a mini Linux container using namespaces + cgroups Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Are SQL Injection Vulnerabilities Absolete ?
SQL injection are genuinely one of those vulnerabilities that people keep predicting will die out — and it keeps refusing to. Bug bounty… Continue reading on Me
Hackernoon
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Goodbye Crypto: Discover the Most Painful Cases of Lost Private Keys
Lost hard drives, forgotten passwords, fires, and secrets gone forever. These real crypto stories show how fortunes vanish. Take a look before it happens to you
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Beyond the Quantum Horizon: How I Built a Live ML-KEM Visualizer with Node.js
Think quantum-proofing your applications requires a Ph.D. in advanced lattice mathematics? Think again. Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
I Looked at My LinkedIn Profile Like a Hacker. What I Found Scared Me.
You spent hours perfecting your LinkedIn profile. So did the attacker who’s planning to use it against you. Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
MobileHackingLabs — Document Viewer writeup
This one was honestly very engaging. It was the most technically involving lab involving using a path traversal vulnerability to override… Continue reading on M
Reddit r/devops
🔐 Cybersecurity
⚡ AI Lesson
2w ago
I'm looking for AWS Security Trainings
Which one would you recommend? My boss told us last month we can get a professor led training. The virtual doesn't work for me as I am always pulled into debugg
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
The Predatory Use of CAPTCHA Fraud
A guide to recognizing fake verification methods and practical steps for securing your device Continue reading on IT Chronicles »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
User ID Controlled By Request Parameter With Data Leakage In Redirect
Access Control Vulnerabilities — APPRENTICE Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Day 42: You Don’t Need Any Other Linux Firewall Tutorial After This
Learn Firewalls in Linux from Scratch with iptables, firewalld, UFW, nftables, and More Continue reading on Medium »
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
Cloud Security Lab Write-Up: SNS Secrets (CloudGoat Scenario)
I recently completed the CloudGoat sns_secrets scenario, a deliberately vulnerable AWS environment designed to simulate real-world cloud… Continue reading on Me
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
What Your GitHub Tells Me Before Your Interview Starts
There is a link on a lot of cybersecurity resumes that nobody thinks twice about. A GitHub link, sitting right under the name, added… Continue reading on Medium
Medium · Cybersecurity
🔐 Cybersecurity
⚡ AI Lesson
2w ago
IOS Bypass Root detection in 1.3.10 safe_device package
In this article, we will explore how the following package works: Continue reading on Medium »
Medium · LLM
🔐 Cybersecurity
⚡ AI Lesson
2w ago
WordPress Plugin Security in 2026: The AI Reality
Vibe-coded plugins, a 5-hour mass-exploitation window, 52% of devs patching too late. What a solo WordPress plugin author changed in 2026. Continue reading on M
DeepCamp AI