#cybersecurity resources

[drnic1]

Beyond Change Healthcare

The continued onslaught of cybersecurity attacks which if anything are only getting worse have impacted the healthcare system in dramatic fashion with the payment network brought down by the attack on Change Healthcare. Healthcare under Cyber Attack I keep hoping that we all get better at combatting these attempts to breach our data and that overall vigilance rises as we become more wary of…

[izicodes]

Black Girls In Tech x Cisco Cyber Academy - Free Courses! 💻🙌🏾

Black Girls In Tech have partnered with Cisco to launch their own Cyber Academy. You can now sign up to any of the available self-paced courses for free and study online and at your own pace.

The courses available ✨

Introduction to Cybersecurity (30 hours)

Cybersecurity Essentials (30 hours)

Networking Essentials (70 hours)

Cloud Security (35 hours)

Programming Essentials in Python (75 hours)

JavaScript Essentials (40 hours)

Programming Essentials in C++ (70 hours)

NDG Linux Unhatched (8 hours)

NDG Linux Essentials (70 hours)

NDG Linux I (70 hours)

NDG Linux II (70 hours)

Upon completion you'll receive a widely recognised certificate as proof of completion of your chosen course.

Link to the courses: [LINK]

I know a lot of girl programmers on here they would definitely benefit from one or more courses they’re offering here!

Take advantage… (you don't have to be a Black woman to study the courses)

I will be taking some of the courses and see how it goes! It looks fun so I’ll definitely give it a go! Hope this helps someone out there!!

[loser-female]

The job of a SOC Analyst

The #1 thing people ask me about is what I do for a job.

I'm a tier 1 SOC Analyst and I'm currently training to do some Cyber Threat Intelligence.

I will explain in detail what I do on a daily basis and why I've decided to do this job... And the negatives.

First of all, what's a SOC. SOC stands for "security operations center". It's a place (in my case virtual as I'm full remote) where a group of people, divided by experience and area of expertise, do the following:

Monitor the activities going on the customer's network or endpoints(= every device connected to the network);

Assess and mitigate alerts coming from the network and/or the endpoint of the client -> These tools send alerts that need to be evaluated and mitigated/responded in a certain amount of time (it depends on the SOC and the type of alert, generally I can assume an amount of time from 15 to 30 minutes per alert. Which is not that much;

Investigate cybersecurity incidents -> the SOC also analyses the kind of "incident" that happens in deep detail by analysing malware, spam emails, the behaviour of users and so on;

If the SOC is big/mature enough there could be some sort of prevention of cybersecurity issues, generally we talk about threat hunting (here for more information on that) and cyber threat intelligence (gathering information from various sources to produce a report about the potential attackers considering also the characteristic of the customer's company such as the size, the geographical area of operations, media exposure, geopolitical issues and what they do - doing this for a bank is different than doing it for a industry)

There are also other functions (such as we have a Security Architect that prepares a personalised solution for each client).

I know what you're thinking. But the AI...

No, they cannot do my job, as the ability of a human to notice patterns and correlate the information among various sources is unique. I memorised, with time, the usual activities my customers do, therefore I can interpret the user actions even with limited sources. And this is just one example.

Soc analysts are roughly divided in three "categories", always keep in mind that every SOC is different and has its own internal rules, that are not to be divulged. This is the rough division I've learned studying cybersecurity and NOT my organisation division.

Tier 1 Analysts are the one that monitors the traffic and activities I've mentioned before. They triage the alerts and if something deserves more investigation or can be discarded. They often perform simple actions of remediation of incidents.

Tier 2 Analysts are the ones that go deeper - they collect malware samples from the incident and analyse it, investigate and remediate more complex security incidents.

Tier 3 Analysts perform more active prevention duties like threat hunting and vulnerability assessments.

Some sources put intelligence activity on the tier 3, others consider it a different activity from the scenario I've described. If a SOC is big enough they might have their own intelligence team separated from the "regular" soc analysts. The rigidity of these roles can vary, as you probably got from my own duties.

On the top we have a SOC manager to coordinate the activities I've described and security architects that design the solution (although the deployment of these solutions can be delegated to the analysts, since we also have to monitor how well these perform).

All these people are usually referred as "blue teamers" btw, which are the ones that perform defensive actions.

A company can have a red team (basically they attack the customer to gain information that the blue team will use to improve their activities). I actually wanted to be a red teamer at first, since it's considered the "cooler" job.

Ok, got it. Now explain to me how you got there since I've never heard anything about this before.

I have a friend that's a system engineer and recommended this job to me.

I studies physics at university but I failed (in my country physics include some computer science classes btw) and I had some related experience I won't share for privacy reasons. No I'm not a criminal lol.

I then started studying - did a bootcamp and got a couple of certifications. Then I got my job.

However. Generally you get a degree in computer science or software engineering, and some universities offer cybersecurity degrees. Unfortunately I cannot tell you what to pick as every university has its own program and I cannot help you with that.

Certifications are a big part of my job unfortunately - mostly because due to how fast it goes you absolutely need to be "on top". It's annoying, yes, I hate it.

However. Consider that once you're hired you definitely will get them paid by your employer - at least in Europe this is on them(idk about the US), but you need some knowledge of cybersecurity to start.

Since some of them are stupid expensive I 100% recommend the compTIA ones. They're basics and respected worldwide. A+, Network+ and Security+ are basics, vendor neutral (which doesn't tie you to a particular "source", as every company works differently), and is relatively cheap (~300€).

Remember that I had previous experience so no one cares that I don't have a degree - I do however and I hope that in the future I will be able to "fix" this.

Great. How do I know if I'm good for this job?

This is on you. However:

One important thing if you don't live in an English speaking country is a good attitude towards foreign languages. I speak 5 for example, but it's an hobby I do since I was a teen;

Can you manage stress? A SOC is a fast paced environment, and you have a limited time to deal with whatever gets thrown at you. You have 15 to 30 minutes to deal with an alert and make a decision. Can you do that without panicking, crying or throwing a tantrum?

Are you a fast learner? You need to learn quickly how to do things, since the tools we use are quite complicated.

Are you willing to work on shifts, Saturdays, Sundays, festivities included? A lot of people can't cope with this and it's fine because it's a massacre. The job is so stressful to the point a lot of people leave cybersecurity because of it. Do not underestimate it, please.

How good are you at remembering random information and making correlations? Because I can remember random bits of information that no one ever thinks of it and it's one of my greatest strengths.

You need to do teamwork and be good with people, customers and so on - you have to explain complicated things you probably read in another language to people that don't know anything about what you do. It's more difficult than most people think.

Procedures are everything here - and for good reasons.

I think this is it.

Money.

USA avg salary: 74 307$ (Glassdoor)

France avg salary: 42 000€ (Glassdoor)

UK avg salary: 28 809 £ (Glassdoor)

There are random numbers I've found online(and with a lot of discrepancies). Consider that you MUST negotiate your salary, and that in certain places you get paid more if you work out of the usual 8-19 work shift. Obv since I live in a different place I cannot tell you if it's worth it - you do your own calculations.

But that's beyond the purpose of this post.

[kitkatcodes]

ˏˋ°•*⁀➷ Virtual Tech Events ˏˋ°•*⁀➷

Tech events are a great way to learn, network, and meet other people who are interested in the same things as you! I've compiled a short list of virtual & hybrid events that are happening soon and seem interesting. ❥

RSA Conference SF ($$$$) Apr. 24 - 27, 2023 I recommend researching for student/company sponsorships, some companies like HackerOne are offering free expo passes ☆ Join cybersecurity leaders and peers as we explore our critical role in ensuring a more secure future. Access expert-led sessions, Keynotes, in-depth Trainings, and more.

Developer Week Europe (€100) Apr. 26-27, 2023 there are discounts available for student, gov, groups ☆ DeveloperWeek Europe 2023 is the hub of the Europe developer community: We will be showcasing 100+ technical speakers from Europe and the world’s top technology companies and corporate engineering teams, inviting 3,000+ attendees from over 1,000+ companies to take part in Europe’s largest developer & engineering conference & expo.

Reactathon San Francisco (free virtual) May 2-3, 2023 ☆ If you're looking for a technical conference on React & the modern frontend ecosystem, look no further than Reactathon. We facilitate conversations around the latest topics, technologies, and various skill levels to help you find the people & subjects that are most meaningful for you. You will learn from some of the leading engineers in the field who present on stage in a single track, with plenty of opportunities to meet & discuss with those speakers and other experts including library maintainers, core-contributors, & sponsor companies working on interesting & relevant problems.

Women in Tech Global Conference (free to $$$) May 9-12, 2023 prices vary based of student, group, vip and scholarships ☆ ​​​​​​This hybrid conference will bring women in tech, minorities and allies from all over the world together through an interactive platform featuring live educational & training content, keynotes, engaging panels, breakout rooms, technical workshops, and networking with virtual and in-person sessions.

Product Day by ADPList ($10) May 10, 2023 ☆ From career success tips to future trends, covering some of the hottest spaces 24hrs non-stop. We bring you 80+ live keynote and thematic networking sessions in design and product. You will experience an extraordinary lineup of contents with a bevy of entertainment.

Signal hosted by Twilio (free) Aug. 23, 2023 ☆ SIGNAL product sessions where you'll see case studies of industry-leading customer engagement from Twilio’s customers and deep dive product demos from Twilio experts. This year, we’ll focus on products for data-driven customer relationships like Segment and Engage, the cloud contact center Flex, Messaging, and building a customer engagement platform through Twilio.

Unfortunately, not all of these events are for free. However, most of the time there will be a way to get discounted or free admission! I recommend checking around on the event sites you want to attend but aren't free for scholarship, volunteer, or discount links. I also recommend checking in with your school or work manager they may have funds saved to send you to these events! example of a "convince your manager" email you can send [｡♥‿♥｡]ノ

[therewillbebetterdays1717]

GREAT OPPORTUNITY! This is the link to the American Dream Academy! It's an official partnership between the Milken Center and Coursera to provide learners FREE access to Coursera courses from top companies like IBM, Meta, Google, Amazon, Intuit, and Salesforce focused on in-demand skills like data analysis, IT support, cybersecurity, project management, UX Design, front-end and back-end development, sales operations and development, cloud solutions architecture, bookkeeping, and digital marketing.

They also provide FREE courses that will help you build soft skills such as communications, critical thinking, leadership, financial literacy, human skills and growth mindset.

I'm personally taking a bunch of courses myself and I can fully say that this is legit! I'm taking Frontend Development and Backend Development from Meta and the UX Design Course from Google. It's great because usually these courses cost a lot of money but I'm doing it all and getting certified for FREE! I already have a few certificates under my belt that I can use on my resume! 😎

Unfortunately, the American Dream Academy program will be ending in 2024 and the last day to sign up for this is NOVEMBER 1st! (They extended the deadline) Make sure you sign up by this date so you don't miss out! 💞

[felizamethyst]

This is probably the most comprehensive and accessible guide that I have found regarding cybersecurity. Even if you are not a victim of DV or stalking (more links below covering this), these are still really great reads to educate yourself on what information you are sharing online. Just as you deserve privacy in your day-to-day life, you also deserve privacy in digital spaces.

Additionally, here are some other great resources about cybersecurity and (more specifically) keeping yourself safe against cyberstalking. (Please only view these links if you are on a safe computer.)

[gabi-code]

#001

site recomendation: OverTheWire

learn and practice security concepts with hands-on challenges

in this site there is a series of what they call wargames, they all increase in complexity and are very interesting

the first one, for example, is the bandit game and is aimed at very absolute beginners and teaches bash commands

each game has a different ssh port, but it's very simple to learn how to connect, just a simple "how to..." on google will help it

tip: when starting a new game, make a text file with every password so that you can always recall or pick over the level on where you left, simple example on the image

[8one6]

[maxlearnmicrolearningplatform]

The Art of Crafting a Microlearning Solution

Microlearning has emerged as a powerful strategy for modern education and training, characterized by delivering content in small, focused bursts. As we navigate the complexities of creating an effective microlearning solution, the design elements play a crucial role. Deciding whether to use infographics, podcasts, animations, videos, or a blend of these tools depends largely on the context and how these elements can be integrated to achieve the learning objectives.

Understanding Microlearning

Microlearning is designed to meet the needs of learners who are often time-constrained and require concise, engaging content. It leverages various multimedia formats to cater to different learning preferences and enhance retention. The flexibility of microlearning makes it suitable for diverse environments, from corporate training to academic settings.

The Role of Design in Microlearning

Design is the backbone of any effective microlearning strategy. A well-designed microlearning module captures attention, sustains interest, and facilitates better understanding and retention of information. The design elements you choose—infographics, podcasts, animations, videos, or a combination—must align with the learning goals and the preferences of your audience.

Infographics

Infographics are visual representations of information, data, or knowledge. They can be highly effective in microlearning because they:

Simplify Complex Information: Infographics distill complex data into a digestible format, making it easier for learners to grasp key points quickly.

Enhance Visual Appeal: The use of colors, icons, and layout can make information more engaging and memorable.

Facilitate Quick Learning: Learners can absorb and retain information faster through visual storytelling.

When to use: Infographics are ideal when you need to present statistics, processes, or comparisons that can be visualized.

Podcasts

Podcasts are audio recordings that can be accessed on-demand. They offer several advantages for microlearning:

Flexibility: Learners can listen to podcasts anytime, anywhere—during a commute, workout, or break.

Engagement: The use of storytelling and conversational tones can make content more engaging.

Accessibility: Audio content is accessible to individuals with visual impairments or those who prefer auditory learning.

When to use: Podcasts are effective for delivering expert interviews, storytelling, or explaining concepts that benefit from a narrative approach.

Animations

Animations bring content to life through motion graphics. They are particularly effective in microlearning for the following reasons:

Illustrating Complex Concepts: Animations can simplify and visualize abstract or complex ideas that are hard to describe textually.

Engagement: The dynamic nature of animations captures and maintains learners' attention.

Versatility: They can be used to demonstrate processes, show cause-and-effect relationships, or visualize data.

When to use: Animations are best for explaining technical concepts, demonstrating processes, or when you want to add an element of fun to the learning experience.

Videos

Videos combine visual and auditory elements, making them a powerful tool for microlearning:

Rich Media: Videos can include visuals, audio, text, and interactivity, catering to various learning styles.

Narrative Power: They can tell a story, provide context, and create emotional connections.

Engagement: Well-produced videos can captivate learners and hold their attention longer than static content.

When to use: Videos are ideal for demonstrating procedures, showcasing real-world scenarios, or when a more in-depth explanation is needed.

Blending Multimedia Elements

The true strength of a microlearning solution lies in the strategic blend of different media types. This blend should be guided by the context of the learning environment and the specific objectives you aim to achieve.

Identify Learning Objectives: Determine what you want your learners to achieve. Clear objectives will guide the selection and combination of multimedia elements.

Understand Your Audience: Consider the preferences, backgrounds, and accessibility needs of your learners. Different audiences may respond better to different media types.

Content Mapping: Map out your content and decide which parts are best suited for each type of media. For example, use infographics for statistical data, podcasts for storytelling, animations for complex concepts, and videos for demonstrations.

Consistency and Cohesion: Ensure that the multimedia elements are consistent in style and tone. Cohesion across different media types helps maintain a seamless learning experience.

Feedback and Iteration: Gather feedback from learners and continuously iterate on your design. This helps you refine the blend of multimedia elements to better meet the learning objectives.

Practical Applications and Examples

To illustrate the effective use of multimedia in microlearning, consider the following examples:

Example 1: Corporate Training on Cybersecurity

Infographics: Present statistics on cyber threats and data breaches.

Podcasts: Feature interviews with cybersecurity experts discussing best practices.

Animations: Demonstrate how phishing attacks work and how to avoid them.

Videos: Provide step-by-step tutorials on setting up security protocols.

Example 2: Academic Module on Climate Change

Infographics: Show the impact of climate change with charts and maps.

Podcasts: Include narratives from scientists and activists.

Animations: Explain the greenhouse effect and carbon cycle.

Videos: Document real-world effects of climate change and mitigation efforts.

Challenges and Considerations

While multimedia elements enhance microlearning, there are challenges to consider:

Resource Intensive: Creating high-quality multimedia content requires time, expertise, and financial resources.

Technical Issues: Learners may face technical issues such as compatibility, bandwidth limitations, or accessibility barriers.

Content Overload: Too much multimedia can overwhelm learners. It’s important to balance the use of different elements to avoid cognitive overload.

Conclusion

Launching a microlearning solution becomes significantly easier when you have a clear design strategy. The choice between infographics, podcasts, animations, and videos—or a combination of these—depends on the context and how well you integrate these elements to serve the learning objectives. By understanding your audience, mapping your content effectively, and maintaining consistency, you can create engaging and effective microlearning experiences that meet the needs of modern learners. The iterative process of gathering feedback and refining your approach ensures that your microlearning solution remains relevant and impactful.

[airwavesdotblog]

Deadly Russian Missile Strike on Odesa: Escalation and International Outcry

A Russian missile strike targeted civilian infrastructure in the Ukrainian city of Odesa, resulting in at least 20 fatalities and numerous injuries. This attack marks the deadliest assault on the Black Sea port city since the commencement of Russia’s full-scale invasion of Ukraine. The incident unfolded as follows: Initial Strike: Around 11 a.m. local time (5 a.m. ET), Russia fired a missile…

[centrelink-official]

servicesaustralia.gov.au/childhood-safety

https://servicesaustralia.gov.au/childhood-safety

[itphobia]

Why CISSP Certification in Cybersecurity is a Game-Changer for Careers?

The CISSP certification in cybersecurity is a pivotal milestone for professionals seeking to elevate their careers. This article explores why a CISSP certificate is not just a credential but a transformative element in the cybersecurity industry, shaping careers and defining leadership roles. The Elevated Status of CISSP Certification in Cybersecurity Field When you get CISSP certification, it…

[rajanmalvankar]

Your Digital Defense! Don't get hooked by phishers or hijacked by malware! This ultimate cybersecurity guide equips you with the knowledge and tools to navigate the treacherous digital waters and emerge victorious.

[nnctales]

Supply Chain Management (SCM): Project Success & Challenges

Supply Chain Management (SCM) is a critical component in the realm of project management, wielding a profound influence on the seamless orchestration of materials, information, and resources from inception to the ultimate consumer delivery. It plays an integral role in synchronizing diverse activities such as procurement, production, logistics, and distribution to optimize overall efficiency and…

[hackeocafe]

7 Free Cybersecurity Resources