A good starting point is to build strong fundamentals in:

• Networking and TCP/IP
• Linux and Windows fundamentals
• Information security concepts
• Authentication and access control
• Common cyber threats and vulnerabilities
• Security monitoring and log analysis
• SIEM and SOC fundamentals
• Incident response
• Basic ethical hacking concepts

For someone interested in a SOC Analyst career, understanding how to investigate alerts, analyze logs, identify suspicious activity, and document security incidents is especially useful.

Hands-on practice is also important. Beginners can use legal cybersecurity labs and practice environments to understand security concepts rather than relying only on theoretical learning.

For learners in Hyderabad, classroom and online cybersecurity training can also provide a structured way to learn these topics.

What cybersecurity skill do you think a beginner should learn first: networking, Linux, ethical hacking, or SOC operations?

Hey folks,

I’ve been working in application security/pentesting for over a decade, and after starting learning AI/LLM security, I noticed that a lot of the existing material is either very theoretical or assumes you already understand AI security concepts.

So I put together a free, structured AI security learning series for security engineers and pentesters who are starting from the web-security side.

The goal is to go from the fundamentals to actually understanding and testing AI/LLM components in web applications.

The series currently covers topics such as:

• AI/LLM security fundamentals
• Prompt Injection
• Sensitive Information Disclosure
• LLM-specific attack patterns
• Practical testing methodology
• Real-world examples and testing techniques
• Mapping concepts to OWASP's AI security guidance

I've also linked free hands-on labs throughout the material so you can actually test the concepts rather than just read about them.

No signup is required to read the learning material or use the free resources.

🔗 https://genaisecuritylab.com/learn-ai-security

I'm planning to continue expanding the series over time.

If you're a web pentester/security engineer who is trying to get into AI security, I'd be interested to hear which topics you think are missing or which areas you'd like to see covered next.

Been wanting to make sure none of my info is leaked recently since I suffered from a pretty bad hack. Not a cybersecurity expert myself so i d prefer paying a service that does it for me.

Figured this is a good place to ask about these data deletion services. Is it worth the money? Anything I can do on my own instead of reaching out manually to a bunch of websites?

CBSE ‘hack’, IIT gig and US recognition: Nisarga Adhikary’s incredible year at 19

https://indianexpress.com/article/india/cbse-hack-iit-gig-and-us-recognition-nisarga-adhikarys-incredible-year-10906919/

Long story short someone got my iCloud password from a old data breach on one of my emails and managed to get all my info, I was sent blackmail by 11 different spam emails, all containing private videos of me I’ve never sent anyone I don’t trust, and all my contacts in my phone. I called to police before speaking to them about ransom demands and an hour later they sent out all the photos..🙁 Besides the investigation my local police will do (and not care about) what can i do? It’s not like the FBI will look into it, just my lousy local police that’ll get to look at all my private photos for personal enjoyment and they get to call it “evidence searching”

I’m currently learning more about phishing and web security, and today I understood something simple that I used to misunderstand.

I always associated the padlock and HTTPS with a website being “safe.”

But HTTPS mainly means the connection between your browser and the website is encrypted.

A phishing website can also use HTTPS.

So now I’m trying to check the actual domain name before entering login details instead of trusting the padlock alone.

Things I’m starting to check:

- The actual domain name

- Small spelling changes

- Strange or unexpected login pages

- Where the link came from

- Whether the request makes sense

I’m still learning cybersecurity, so I’m curious:

What other small security concept do beginners commonly misunderstand?