CISSP is probably the most well-known and coveted cyber security certification, but it’s difficult to attain.  Many cyber security students and prospective candidates wonder whether the salary a CISSP certification can give you will make up for this difficulty. Your CISSP salary will depend on which job role you choose. However, because CISSP is an advanced certification that covers both technical and managerial aspects of cyber security, overall job prospects are good, and salaries are high. We’ve broken down the most common job titles for CISSP holders and combed through salary data fo ..read more

In cyber security, Cyber Kill Chain and MITRE ATT&CK are two frameworks commonly used to understand and prevent cyber attacks. Are you wondering which one is better or which you should use for your organization? While both have strengths and weaknesses, you may struggle to decide which one’s best. This article will explain these two popular frameworks' history, background, and respective steps and phases. We’ll look at their key components—such as objectives and applications—and help you understand the main differences between them. Finally, we’ll look at the advantages and limitations of ..read more

Active participation as a mentee is crucial for unlocking the full potential of your mentorship, ensuring that both your time and your mentor's are well spent.  Yet, the burning question remains: how do you extract the maximum amount of benefit from this mentorship? How do you ensure that your mentor's guidance is practical and fits your situation?  Rest assured: we've got you covered! We’ll help you prepare clear and targeted questions to ask your cyber security mentor beforehand. In this article, we'll dive into the importance of questioning when seeking guidance from a mentor for ..read more

PowerSploit is a post-exploitation framework that real-world hackers use to enumerate compromised machines, collect credentials, perform privilege escalation, exfiltrate sensitive data, and more. All great hackers use the tools in this framework. Now it's time for you to discover why. Written in PowerShell, PowerSploit consists of a series of scripts divided into modules, each designed for a specific post-exploitation activity. This guide will teach you what each module can do and demonstrate how to use the most popular ones. By the end, you’ll discover why PowerSploit should become one of th ..read more

The cyber security industry reveals various roles, each with its responsibilities, skills, and career paths.  This introduction to cyber security job descriptions aims to shed light on the specific aspects of various positions within the field.  We’ll examine everything, from the foundational roles that form the backbone of security operations to the specialized experts who fend off sophisticated cyber threats and strategic leadership positions overseeing and managing cyber security at an organizational level.  Each job description outlined here will provide insights into the r ..read more

Why is it so hard to get into cyber security?  This a common lament of many of those aspiring to enter the booming cyber security industry and get access to high salaries, a remote work lifestyle, and rewarding career opportunities.  But if you don’t know how to enter cyber security and you feel lost and confused by the advice, where do you even begin? Don’t panic! We’ve done the hard work for you.  In this guide on how to start a career in cyber security with no experience, you’ll learn about the cyber security landscape, foundational knowledge for cyber security careers, cert ..read more

As a digital information professional, you'll want many cyber security tools in your toolkit. One of the most popular ones is Wireshark.  Obtaining the Wireshark certification demonstrates your prowess with the packet analyzer tool not only to yourself but also to potential employers. But how do you know if the Wireshark Certified Network Analyst (WCNA) certification is right for you? Let’s explore what the WCNA is, what you’ll be tested on, the best ways to train for the certification, and ultimately figure out if this is the right certification for you to pursue.  If you’re ready ..read more

So, you want to use Wifite to efficiently attack WiFi networks, eliminating the need for manual setup and configuration? Whether you’re learning about WiFi hacking or the security of wireless devices, this tool streamlines the process so you can jump right into action as it automates several WiFi hacking techniques allowing you to capture WPA handshakes and attempt to crack passwords with minimal effort. This article will show you how to use Wifite. We’ll introduce you to the tool, explain the hardware you need, and show you how to set up your own lab to perform these attacks. Finally, we’ll ..read more

How often do cloud security incidents occur? Who gets hit and why? What vulnerabilities arise from cloud computing, and how are they exploited? Up-to-date cloud security statistics can help you understand all of this.  Most businesses—and a substantial proportion of individuals—now rely on at least one cloud service for accessing software, storing data, hosting infrastructure, or a combination of all these. This gives rise to specific risks that all cyber security professionals must be familiar with.  We’ve been exploring the latest information on cloud trends, recent security breac ..read more

It might not have the mischievous allure of an offensive role, but a defensive Blue Team role can be incredibly rewarding and is in higher demand by employers. However, knowing how to structure your defensive cyber security training can be difficult. This is why we’ve created this list of 20 courses that we think cover everything you need to know to get started in a defensive cyber security role, from foundational knowledge to the latest Blue Team tools and techniques. Whatever stage you’re at in your cyber security journey, you should find a course for you in this list of the 20 best Blue Te ..read more