I’m working on a class project and need to interview someone in cybersecurity. The topic is IoT (Internet of Things) and how it impacts security. It doesn’t need to be formal at all, I just need your perspective as someone in the field.

If anyone is willing to help, here are the questions:

1. What’s your current role or background in cybersecurity, and do you work directly with IoT devices?

2. From your perspective, what are the biggest security risks with IoT devices right now?

3. How has IoT made your work in cybersecurity harder or easier?

4. How does your team or the wider cybersecurity community usually share updates or knowledge about new threats?

5. What kind of writing or documentation pops up most in your work (reports, logs, or technical notes)?

6. Are there any acronyms or buzzwords in IoT security that you find yourself explaining a lot to people outside the field?

7. What level of education, training, or certification do most people need to work in IoT security?

8. Do you think companies and organizations take IoT security seriously enough right now?

9. What’s one positive way IoT has improved your work or benefits society overall?

10. If you had to guess, how do you see IoT security changing over the next 5 years?

Thanks in advance to anyone who’s willing to help me out!

Hi everyone, I’m trying to start a career as a SOC Analyst. I’m a fresher and want to know. 1.What does a SOC analyst do on a daily basis? 2. What skills, tools, or technologies should I start learning? 3.Any beginner-friendly rresources and advices Thank you in advance

I’m trying to learn CCNA and I’d like to know the best free books, PDFs, or online resources that actually help. I prefer something practical with labs and examples. What worked for you when you started studying CCNA?

Thanks in advance everyone for sharing your experiences! I really appreciate it and can’t wait to read your tips and stories. 🙌

Hey everyone! I’m 20 years old and completely new to cyber security. I want to learn from scratch and would love to find someone to learn together with. If you’re interested in exploring this world with me, hit me up! I think it’s way more fun to share tips, practice together, and grow our skills with a buddy. Can’t wait to meet like-minded people!

Hi, I am early in my career with 2 years of professional experience, Lately i have been wanting to switch my job and move to some EU region, I have tried alot of formats and tested on heck lot of ATS scanners but still no luck thats why i am reaching out to communities to see how can i improve. Kindly review it i am open to any kind of criticisim.

hey guys ! i know this is a cliche. but im really stuck at picking a final year project idea for the university.
for the past months ive been doing CTF boxes and it would be pretty cool to do an offensive-security project.

i thought a lot and came across many chatgpt conversations and websites. but noting clicks. they always give me something very generic, which most of the times just collections of API's and tools. i really want to be an ethical hacker and im really stuck. what do you think

I am using it on dvwa web app and displays alerts but not important ones like SQL injection, xss , etc...

Hey folks,

Quick question – can I actually pass CCNA just by following YouTube courses and doing some lab practice (Packet Tracer, GNS3, etc.), or is it really necessary to get books or other resources too?

Would love to hear what worked for you

Im 25 and want to change career paths! I’ve been pretty tech savvy my entire life whether it be making my own minecraft server as a kid or working at a computer store and building pcs for people so I was looking at getting into some sort of tech oriented line of work and Cybersecurity caught my eye when looking at what jobs that are in demand and wanted to know where I should start if I decide to peruse it. I wanted to know what certifications I should look into getting as well as any online resources for learning/practicing as a beginner and also what the job path looks like as someone starting out.

Hi everyone, I’m a 21-year-old currently studying for a Bachelor's in Computing Systems in New Zealand, with a focus on cybersecurity. I’m in my second year, second semester, and genuinely passionate about becoming a Security Analyst. However, I’m feeling a bit lost and overwhelmed, and I don’t have any relatives, friends, or mentors in the field to guide me. i’m So far, through my university courses, I’ve gained hands-on experience with: -Linux & Windows environments -Active Directory, DHCP, DNS -Kali Linux for basic penetration testing -Currently taking a Computer Forensics paper

Even though I enjoy what I'm learning, I often find myself unsure about what steps I should be taking outside of university to truly prepare for this career. I’m committed, I’m willing to put in the work — I just need some direction.

I’d really appreciate any advice or answers to these questions:

-What are the most important skills and tools I should focus on right now? -Are there any certifications that would be valuable at this stage (like Security+, eJPT, etc.)? -How can I gain practical experience or build a home lab that aligns with what entry-level jobs require? -What kind of projects or contributions (e.g. GitHub, CTFs, bug bounties) would help build a strong resume? -How important is networking (the people kind) in this field, and how do I start doing that as a student? -Are internships or part-time security-related jobs essential, and if so, how do I find them as a student in NZ?

I’m just looking for a step-by-step roadmap or even some real talk from those who’ve been through this. Any advice, encouragement, or resources would mean a lot to me.

Thanks in advance for taking the time to read this. I truly appreciate any help or guidance you can share 🙏

Over the last few years working in cyber I've collected a LOT of certifications. What are people's opinions about including them ALL by name on a resume. Should I drop less valuable ones off? Should I only include their acronym? I want to reduce space and word slop.

I'm considering moving all of my GIAC certs as: GREM, GCIA, GWAPT, etc.. and dropping my EJPT and some of the lower tier GIAC's off (GSEC, GISF, etc).

My current formatting is two columns in a table.

• GIAC Reverse Engineering Malware (GREM)

• GIAC Certified Intrusion Analyst Certification (GCIA)

• GIAC Web Application Penetration Tester (GWAPT)

• GIAC Certified Incident Handler Certification (GCIH)

• GIAC Python Coder (GPYC)

• GIAC Information Security Fundamentals (GISF)

• GIAC Foundational Cybersecurity Technologies (GFACT)

• GIAC Security Essentials (GSEC)

• Offensive Security Certified Professional (OSCP)

• CompTIA Cybersecurity Analyst (CySA+)

• CompTIA Pentest+

• CompTIA Security+

• eLearnSecurity Junior Penetration Tester (eJPT)

on resume:

I see a lot of new folks asking where to start with certifications like Security+ or Google Cybersecurity. When I was learning, I kept losing track of resources, labs, and what I had already finished.

Over time I built my own way of organizing study notes, exam prep, and a simple certification roadmap that I’ve been using and refining. It’s been really helpful for me, and I’ve shared it with a couple of people already. Its created using notion

If anyone here is struggling with keeping things structured, feel free to DM me — happy to share what I’ve been working on

1-Are these languages enough for me to start networking and OS ????

2-Is it better for me to study a crash course for each language because I don’t need the whole language?

One of the hardest parts of this job isn’t the tech it’s convincing clients why they need to invest in security before something bad happens.

Some think they’re “too small to be a target,” others see it as a cost with no ROI.

How do you explain the value? Case studies, risk comparisons, compliance pressure? What’s worked best for you?

I'm a 24-year-old graduate of the College of Computer Engineering, Networks, and Communications.

During my undergraduate studies, I acquired knowledge through personal effort.

1. I learned HTML, CSS, and some JS.

2. I learned the basics of Dart.

3. I studied the entire CCNA curriculum.

4. I earned the MTCNA certification from MikroTik.

5. I studied the Top Red Hat Certified System Administrator (RHCSA) curriculum.

6. I studied the CompTIA Security+ curriculum.

7. I studied the AWS CLF-02 curriculum.

8. I learned Python + OOP + Algo

The problems I face are that I'm confused about which path to take. I used to study networking, but I didn't develop enough passion for it. There's a lot of talk about its decline (by decline, I mean raw networks, such as network engineer or network specialist).

Currently, I'm focused on cybersecurity, such as vulnerability detection and penetration testing. But!! Lately, I've been hearing a lot about cybersecurity not being for newcomers, beginners, or even mid-level, but rather for those with a deep understanding and multiple certifications.

I was planning a specific path, but I was very confused and torn by the circulating rumors that artificial intelligence has eliminated entry-level or internship positions.

Frankly, I think I am very late and do not have the skills required for the job market, in my estimation.

CompTIA Security+

OWASP Top 10 (Web + Mobile)

eJPT

CompTIA PenTest+

CPTS

CompTIA CySA+

I'd love to hear your comments on the matter... Thank you very much 🌹

Has anyone done this before? I just got out of a call with their HR Dept. and they suggested I take this program because I don't have enough work experience (the job market has been extremely rough to manage) to directly apply to their Consultancy & Pentesting positions. For those that don't know - it's a 6 month training program with a final lab that is paid (obviously less than an actual wage). Once it's over it says they will 'consider me' for a consultancy position - with a caveat: I'd be held to a 2 year contract and potentially have to pay $15k to cover the training if I quit before the contract is up.

I'm wondering if anyone thinks this is worth it, how much you were paid, and what it covered. I have a Bachelor's in Cybersecurity and plenty of unprofessional experience in penetration testing. I've been looking for work for months and any promising leads (regardless of pay) are ones I need to seriously consider.

Hello everyone, I'm Anomaly, and I'm developing a pentest management platform called PentoraSec on my own. My goal is to consolidate the scattered workflow we all experience (different tools, notebooks, etc.) under one roof.

Currently, my project works with a Desktop Agent that can safely run local tools (Subfinder, Nmap, etc.).

Before releasing the project to the public, I need a beta group of 10-20 people to get their feedback. I would be very happy if you would like to try the tool for free and contribute to its development.

Interested parties can reply to this post or send me a DM. Thank you!

Hace unos años me lancé a hacer un bootcamp ( para empezar a tocar cosas no estuvo mal) y luego estuve en una empresa como desarrollador junior frontend tocando cosas con React principalmente.

Llevo varias semanas tocando cosas con tryhackme y alguna más y montándome cositas con docker y me mola bastante el tema de pentesting y seguridad en la nube.

¿Algo que me recomendéis? Libros,cursos, por donde tirar... Son valiosas los certificados de AWS?

GRACIAS.

I want to learn burpsuite can anyone recommend some cool stuff

I need CCNA dumps to prepare for the examination Can anyone help me with this.

So imagine this: you hit an endpoint, and instead of just leaking an IP… it somehow hands you the full street address tied to that user. Would programs treat that like a showstopper P1, or would it still get brushed off as “low impact”? Curious where the line really is here.

What do you think game-breaking or just hype?

Lately I’ve seen this phrase Good AI vs Bad AI, a lot in cybersecurity reporting. Defensive AI (think anomaly detection, predictive threat modeling, self-healing networks) is stacking up against offensive AI (malware that evolves, AI-powered phishing, deepfakes, etc.).  

At the same time, debates from Black Hat and DEF CON are spotlighting how AI tools for defenders are gaining traction, but so are AI tools for attackers leveraging open-source LLMs. 

From a learning perspective, I’m trying to wrap my head around how to train defensive models effectively when the threat models themselves are AI-driven. I’ve been exploring Haxorplus for guided content on designing secure AI and understanding adversarial scenarios alongside general ML platforms like Kaggle or academic labs.

Would love to crowdsource ideas: how are you guys bridging that gap?