I am a first year student and I want to build my career in cybersecurity and for that I need guidance as I am going from scratch so I need guidance from the people who are learning about this niche or have already built a career in this.

Dear Everyone,

I am conducting this survey as part of my university thesis on cryptography, internet security, and the protection of personal information online.

The purpose of this questionnaire is to explore how people understand online privacy and security, and how they protect their personal information while browsing the internet. The questions focus on everyday activities, such as accepting cookies on websites, managing privacy settings, understanding encryption, and making decisions about sharing personal data online.

Survey Information:

• Duration: Approximately 7–9 minutes.
• Eligibility: Participants must be 18 years or older.
• Participation: Completely voluntary.
• Privacy: The survey does not ask for your name or email address. Responses will be used exclusively for academic research and presented in summarized form.
• Technical knowledge: No prior knowledge of cryptography or cybersecurity is required.

There are no right or wrong answers to questions about your opinions and personal habits. Please answer honestly based on your own experiences.

Thank you for taking the time to participate in my research. Your contribution is greatly appreciated!

Survey Link: https://forms.gle/ptG8GoAynhyMZRiK6

If this breaks rule 5 I apologize, but has anyone gotten a text like this before. I know for a fact this is my coworker's number but it's just an odd thing to receive out of nowhere. Obviously I am not clicking the link.

I am a Network Engineer switching to Cyber. I would really appreciate if I could get some pointers on what is wrong. Is there something I am missing or doing wrong?

Hi everyone! I recently completed my Bachelor’s degree in Business IT (Informatique de Gestion) and just started my Master 1 in Cybersecurity (SSI). My background covers software development, databases, and IT management (Java, C++, SQL, Oracle, UML, ERP), but I lack deep technical foundations in low-level networking, Linux administration, and system security. My goal is to apply for a Master 2 under an Alternance (Work-Study) program abroad next year. To make my profile competitive for both university admissions and corporate technical interviews, what core technical skills, tools, or home lab projects (e.g., Active Directory, Wireshark, Linux, pfSense, TryHackMe) should I master on my own this year? Any study roadmap or resource recommendations would be greatly appreciated!

Today, we use the internet for almost everything, including studying, shopping, banking, and communicating. But have you ever thought about how safe your personal information is online?

Cybersecurity is the practice of protecting computers, mobile devices, networks, and personal information from cyber threats.

Some common online threats include:

🔹 Phishing: Fake emails and messages designed to steal personal information.

🔹 Malware: Harmful software that can damage devices or steal data.

🔹 Ransomware: Malware that locks files and may demand money to restore access.

🔹 Password Attacks: Attempts to steal or guess passwords to access accounts.

The good news is that everyone can take simple steps to stay safer online. Using strong passwords, enabling two-factor authentication, updating software, and avoiding suspicious links can help protect your information.

You don't need to be a cybersecurity expert to start learning about online safety!

📚 Want to learn more?

Read my beginner-friendly article on CyberNexa:

https://learncybernexa.blogspot.com/2026/10/what-is-cybersecurity.html

#Cybersecurity #OnlineSafety #CybersecurityForBeginners #CyberNexa

¡Hola a todos!Estoy terminando Ingeniería en Informática y estoy desarrollando un proyecto académico llamado SecureCode.Es una herramienta que busca automatizar la evaluación de controles de seguridad en repositorios de GitHub, identificando cumplimientos e incumplimientos y generando evidencia para facilitar las revisiones.Para complementar el proyecto, necesito conocer la opinión de estudiantes, desarrolladores y profesionales del área TI sobre la utilidad de este tipo de soluciones.No necesitan ser expertos en ciberseguridad ni haber utilizado SecureCode. La encuesta incluye una explicación del proyecto.⏱️ Duración: 5–7 minutos.

🔒 Anónima y voluntaria.

🎓 Finalidad exclusivamente académica.

💻 Dirigida a estudiantes y profesionales del área informática.Enlace a la encuesta:

https://docs.google.com/forms/d/e/1FAIpQLSeiHEDD-ZIwY7WvqOXYJi8dAmAR4E44sejHmlwhqCa3JkExFg/viewform?usp=header

Me ayudarían muchísimo respondiendo. También agradecería cualquier comentario o sugerencia sobre el proyecto.¡Muchas gracias por su tiempo!

Throw away account.

I feel hopeless and I don't know what to do.

Back in 2020 I was swatted. No idea who did it or why. I'm a nobody from nowhere and I'm not a gamer or streamer.

In 2025 I was doxxed. Someone took a screenshot of a post on my private Instagram account and sent it to someone who blew it up all over the country on all platforms. They included my workplace and people commented my phone, address, family member names...ect.

I tried for months to get the posts taken down because I am concerned someone is targeting me. The platforms didn't care, in fact when I reported that my personal phone number had been posted without my permission- x told me they didn't see any personal information in the comment I reported even though it was my personal number and that counts per their own policy as personal information.

I gave up for a while because I just didn't know what else to do.

Now, recently, I guess a bunch of my log in and passwords were exposed online, then yesterday I received an email that someone was trying to log in to my deactivated Facebook account (I dont have social media anymore after being doxxed).

I am genuinely terrified, I am scared someone is targeting me because I'm not famous, I'm not chronically online...someone just doesn't like me (or i am just extremely unlucky and the swatting and doxxing are completely unrelated) but it seems like there isn't anything I can do about it.

I reached out to a bunch of lawyers after the doxxing incident but not a single one got back to me.

The doxxing incident was reported to the police when it occurred.

Does anyone have any advice or tips? I am about to give up and just accept that I'll probably be a victim of some sort of harm and there isn't anything I can do about it.

Tengo 18 años, ultimo año de escuela técnica con orientación en programación. Estoy pre-inscripto en computer science en la fceia-unr, pero no estoy seguro si es lo que quiero, me interesa mucho la ciberseguridad pero no encuentro ningun lugar para estudiarlo, me interesa algo serio y enfocado en seguridad ofensiva, pentesting, red team, etc. Siempre recomiendan ser autodidactas pero no me convence del todo ese metodo pq siempre prefiero tener a alguien que me instruya en el proceso sin depender de andar buscando 600 tutoriales en yt o cursos de udemy, soy fan de la ia y la ciberseguridad asi que me gustaria poder encontrar una disciplina que las combine, y en cuyo caso q no se pueda me da igual, quiero aprender seguridad ofensiva, pero me pone en duda pq tmb me gusta el desarrollo(actualmente soy pasante programador). Busco metodos para darme cuenta que enfoque realmente quiero seguir pq ambos me gustan, y en donde poder estudiar ciberseguridad en argentina, ya sea a modo de carrera o tecnicatura, investigue en algunos lugares pero suelen ofrecer cuotas muy caras para la inscripcion y hace practicamente un año estoy buscando y no encuentro nada. Que tecnicatura/universidad/carrera recomiendan para encontrar una solucion?

I'm a final year student and am currently looking into quantum-safe migration. I'm looking at the challenges of migration, especially in light of other priorities.

I just have a short survey of 10 quick questions - if you're able to spare me with 5 minutes of your time I'd be really grateful - all the good karma to you!!

Thanks in advance!

Расскажите, пожалуйста, что вам для этого понадобилось, насколько это сложно, и что изучали на первых курсах?
Реально, интересно, какова там, и что нужно для того чтобы поступить.
Кто с чего начинал, расскажите свой опыт, пожалуйста.
———————————————————————-

Please tell us what you needed to do that, how difficult it was, and what you studied in your first few years of college.
I'm really curious about what it's like there and what it takes to get in.
Who started from where? Please share your experiences.
————————————————————————-

So basically my name is zaid Mahmood and write now I am in grade 11 I was wondering if u can give me tips to learn cybersecurity analyst so in college I can get a head start.

A threat intelligence researcher (@TheM3gatr0n) found an active, custom-built attack platform called Cairn on a Hong Kong-registered VPS. It is not a simple script or toolkit — it is a full autonomous orchestration system driven by an LLM (DeepSeek v4.1-flash).
The operator supplies a target and a goal (e.g., obtain a webshell or RCE). The AI then handles the rest: it spins up a dedicated Kali Linux Docker container per victim, reviews a fact-graph of prior attempts, selects the next action, executes it, records the outcome, and continues across sessions with almost no human involvement.
Over roughly 13 days it logged \\\~230,000 AI-dispatched events and \\\~18,000 active exploitation attempts against 85+ targets. It heavily focused on Magento/e-commerce systems and demonstrated adaptive behavior by tracking failures and writing structured summaries of what worked or was blocked. Access to the model was maintained via a subscription rotation service.
This is one of the clearer public examples of an LLM being used for real, ongoing autonomous offensive operations rather than one-off experiments.

https://x.com/them3gatr0n/status/2110406318976848132?s=46&t=oXrX4\\\\\\_YhCRl53cYhwA-HsA

Hey hola pequeños desconocidos, como bien dice el bello título estoy desarrollando una distro de Linux enfocada en la ciberseguridad pero esto no será ni de cerca como PHLAK, Backtrack, Katana o Kali. Llevaré mi juguetote más allá: La idea general es que toda información heterogenea (red team/blue team/osint/malware research/network deception /blockchain) convertirla en información homogénea y en base a eso poder ejecutar de forma automática o manual cualquier medida.

Esta cosa está planeada para no tener una, sino 3 LLM trabajando en conjunto en diferentes capas del sistema.

Adicional ya cuenta con 3 cores de evidencia, correlación y uno que evalúa la calidad de ambos.

Adicional va a tener 3 engines de auditoría para que cualquier futura herramienta o integración sean verificadas de forma automática e integradas de forma correcta sin romper nada.

Actualmente estoy en la parte de crear e integrar Oracle y Nexus para las posteriores integraciones de las LLM y después de ello terminar de pulir todos los módulos. (El de mayor avance es red team)

Aún no está disponible en github hasta no tener la versión 1.0 de todo el sistema y que pasen mis auditorías de calidad y los laboratorios y exámenes de estrés de simulación de ataques, verificación de código, vulnerabilidades y demás.

Lo estoy creando todo desde un móvil Termux usando Python. La idea es que el runtime sea ejecutable en todos los formatos posibles, desde Termux, VM, Bootearlo desde un usb como Tails y desde una propia máquina Linux..

Si tienen algún consejo o idea (por qué según mi Road map me tardaré aprox 1año en terminar por el trabajo, la novia y demás) será bienvenido

Les dejo unas capturas de como se ve. Es algo rústico pero para llevar un mes en esto no está tan del asco.

Atte: Ø

Got interested in cybersecurity recently and have been binging it but I am not really doing anything practical at the moment rather it's mostly if not entirely theoretical. So I was wondering from where I could do practical work for free

Thanks!

As the title suggests , need some project ideas with mid level difficulty ( pls no block chain)

Both offensive and defensive are ok

any suggestions are appreciated.

Posted a breakdown of Jinja2 Server-Side Template

Injection for anyone learning web exploitation.

The basic detection payload is simple:

{{7*7}}

If the app renders "49" instead of the literal string,

the template engine is evaluating your input. From there

you can fingerprint Jinja2 specifically and start

climbing the object hierarchy to reach RCE.

What makes SSTI dangerous is that it runs server-side —

you're not just injecting into the page, you're executing

inside the application's Python process.

Great technique to know for CTFs and bug bounty.

Full video breakdown on YouTube. Happy to answer

questions on payloads or escalation paths.

https://youtu.be/2xYPOoveUds

Good article.

Kaspersky surveyed 7,200 people in 18 countries in March 2026 and found that Gen Z is the most active AI-using generation: 47% use AI daily or almost daily, and 27% treat it like a friend. Yet only 42% consistently take protective steps such as verifying AI answers or avoiding sharing confidential or sensitive information.

I want to start my cyber security journey but I'm a bit lost

I'm interested in offensive Cyber security and bug bounty

I want to get into cybersecurity but I don’t really know where to start I did coding in high school where I made a website and loved it but 4 years Later I want to get back into coding but don’t really know where to start.

​

Hi everyone,

I need some advice on choosing the right further education provider. To give you some context: I am a German living in Germany, currently unemployed, and actively looking for a job. I want to upskill and transition into IT—specifically starting out through a Windows course—but I am starting with absolutely no experience in the field.

Because I am unemployed, I can finance a course using a Bildungsgutschein (education voucher) from the Agentur für Arbeit. However, I want to be extremely careful because I do not want to fall into one of those bootcamp scams. I have read a lot of warnings online that many providers in the German market operate like "factories" that just want to cash in on government vouchers without actually teaching you what you need to know. Some of these sketchy providers even lure beginners in by unrealistically promising starting salaries of up to €80k for people with zero prior knowledge.

Furthermore, I've heard that many German companies are highly skeptical of generic bootcamp graduates because they often lack a solid foundation and practical, hands-on experience.

I would love to hear your advice:

\* Which AZAV-certified providers on the German market are actually reputable and offer good practical training?

\* Considering I have no prior experience, how do employers realistically view these bootcamp certificates?

\* Would it be a better idea to avoid generic bootcamps altogether and focus on official vendor certifications (like Microsoft, Google, AWS, or Cisco) instead?

Any recommendations, personal experiences, or red flags to watch out for would be greatly appreciated. Thanks!

Hey everyone!

I've been developing a free Android application called CatSuite, focused on learning and practicing web application security.

One thing I've noticed is that beginners often jump straight into vulnerability scanners without fully understanding what happens between a browser and a web server.

Learning how HTTP requests work, how authentication tokens are handled, and how servers respond to different inputs is an important foundation for web security.

That's part of what motivated me to build CatSuite.

What can you explore with it?

• HTTP/HTTPS Interception: Understand what information your browser sends to a server.
• Repeater: Modify and resend requests to observe how responses change.
• Intruder: Experiment with different request inputs using wordlists in authorized labs.
• JWT Decoder: Explore the structure of JSON Web Tokens.
• SSL/TLS Inspection: Learn about certificates and encrypted connections.
• API Testing: Send requests and inspect responses from REST APIs.
• Endpoint Discovery: Explore paths and endpoints in applications you have permission to test.

For beginners, I'd recommend starting with a deliberately vulnerable application such as OWASP Juice Shop or a local test environment.

For example, you can inspect a login request, identify its headers and parameters, and observe how the application handles different inputs.

The goal isn't to replace professional desktop tools like Burp Suite, but to make HTTP and web security concepts easier to explore from an Android device.

CatSuite is free and available on Google Play:

https://play.google.com/store/apps/details?id=br.com.netcattest.catsuite.app

I'm the developer, and I'd really appreciate feedback from both beginners and experienced security practitioners.

For those learning web security: what's the hardest part of understanding HTTP requests, authentication, or API testing?

And for experienced pentesters, what would you consider essential in a beginner-friendly security toolkit?

Please use security testing tools only on systems you own or are explicitly authorized to assess.

AI Security is increasingly being discussed. So, I have been looking for articles about how different generation are thinking about this topic. ASEE Cybersecurity argues that Gen Z’s comfort with AI creates a cybersecurity confidence gap: 61% believe cyber incidents will not happen to them, while 62% engaged with a phishing message and 74% opened unfamiliar links. It also reports that 55% share personal information with AI chatbots, 47% hide their AI use at work, and only 42% consistently take protective measures when using AI services. Read more

Hello everyone 🙏🏻🥺 hoping you could help me

I would need some IT participants to test my website.

I’m currently working on my capstone project for my Bachelor of Science in Information Technology (BSIT), and I’m looking for people who are willing to test my web application and provide feedback.
Introducing MimeSim: ARMeD SMTP Simulator 🛡️
MimeSim is a web-based email security policy simulator designed to demonstrate how email security gateways evaluate incoming emails.

It allows users to simulate different email scenarios and understand why an email may be delivered, held, or rejected based on configured security policies.

Some of its features include:
Email authentication checks (SPF, DKIM, and DMARC)
Anti-spoofing and spam filtering
IP reputation and blocked sender checks
Content and attachment security checks
Policy bypass and exception testing
Diagnostic explanations showing how the final email verdict was determined

Please note: MimeSim is an educational simulation tool. It does not send real emails or perform actual malware scanning.

Who can participate?
Anyone interested in IT, networking, cybersecurity, or email security is welcome! You don’t need to be an expert to try it.
After testing, I would really appreciate it if you could answer a short evaluation survey. Your feedback will help me assess the system’s usability, functionality, and areas for improvement.

🌐 Website: https://mimesim.xo.je
user: admin
pass: admin1234

📝 Evaluation Form: [https://docs.google.com/forms/d/e/1FAIpQLSch1_Jmg03OxAeUL6qzL5vPOHL4adp1MRu0dXj-46htRhSp4g/viewform
Thank you so much to anyone willing to spare a few minutes to help me complete my capstone project! ❤️
Your time and feedback would mean a lot! 🙏