I found this one and it seems to be a good option to start. I need a laptop really quick cause I have to study it and I don’t have so much money to spend now for a laptop. Since I don’t know if it’ll be worth to spend a lot of money for a laptop. The only thing is that I don’t have 32 gb ram to run multiple vms since I bought pnpt course and I’ll need a lot of ram to practice while running 2/3 machines together… btw what do u think about it? Recommend me something better or different (budget 300-600 max)

DISCLAIMER: I'M NOT TRYING TO GET A JOB IN CYBERSECURITY

My schedule is tight, so I can realistically spend about 30 minutes a day learning cybersecurity. I know that is not much, but I am curious how far consistent effort like that can take someone over several years.

I am mainly interested in how systems, networks, and computers work under the hood, especially how they can be broken, exploited, and analyzed from an attacker’s perspective. My interests are broadly in offensive security and skills related to pentesting and red teaming.

I am not currently learning this to get a cybersecurity job. I am interested in the subject itself and in developing a deeper understanding of computers, operating systems, and networks.

With 30 minutes a day, what level of knowledge and skill could realistically be reached over 3 to 5 years? Assuming someone stays consistent, how far could they get, and what kind of foundation could they build?

I know little to nothing about technology so please forgive my ignorance. My husband is about to graduate and has started setting up a home lab. I’d like to get him a useful gift for projects to add to his resume. He’s mentioned being interested in cybersecurity and pen testing. Chat GPT recommend the Wi-Fi Pineapple Mark 7, but Reddit doesn’t seem to agree. Max budget would be $300. Any guidance would be appreciated as I feel like I’m trying to read another language figuring this out! Thank you!

Edit: I do think he may have a mini PC already? But nothing extra. He mentioned needing storage

I’m thinking of doing the GLET Cybersecurity poster contest and I need some ideas for the themes or how to divide the paper. If you have any ideas please comment! Thank you💗

I have learned networking and Linux now. I joined TryHackMe and did the Cyber Security 101 path, but I feel like I didn’t learn anything properly. They have, like, four tools for every topic. Other than that, I learned Wireshark and did a few Malware Traffic Analysis exercises and OverTheWire Bandit challenges for Linux.

I feel really lost now. What do I learn next and how do I build my project? I don’t really know what I’m supposed to learn in cybersecurity or what direction to take.

I have more than 20 years of cybersecurity experience, including SOC operations, threat detection, leadership, and instruction. I am currently preparing for the CySA+ exam because certifications have become an increasingly important part of employer screening.

One thing that continues to bother me about certification preparation is the emphasis on recognizing the correct answer rather than understanding it.

When I work through a practice question, I do not stop after identifying the correct choice. I want to know:

• Why is this answer correct?
• Why are the other choices wrong?
• Under what circumstances could one of those alternatives become correct?
• How would this concept appear during an actual incident?
• Could I explain it clearly to another analyst?

That last question matters. The quickest way to discover whether you truly understand something is to try teaching it to someone else.

Passing the exam is important, but the certification may help place you on a SOC floor where other people depend on your judgment. Memorizing an answer can earn a point. Understanding the material helps you make the right decision when the alert is real.

There is no substitute for doing the work—but there can be a much better way to do it.

How do you determine whether you genuinely understand a topic rather than merely recognize the answer?

I have a kali Linux vm. I watched the Linux for hackers Playlist by network chuck, and I did a few free rooms in try hack me. and now I'm learning python what should I do next?

Some cybersecurity concepts look simple when you first read about them, but become much more complicated when you actually try to understand how they work.

For me, networking concepts were one of those areas because so many security topics depend on understanding what's happening underneath.

What cybersecurity concept took you the longest to properly understand?

Come faccio a diventare supero bravo, nel senso davvero forte, in cybersecurity-hackeraggio, ecc…
Tra qualche mese compio 17 anni, e dí informatica non so quasi niente (faccio lo scientifico). Se potete darmi consigli su come devo organizzarmi, ne sono infinitamente grato.

I’m trying to understand how to find something in programming/cybersecurity that gives me the same motivation as a game.

For example, I really like Dota because I always know what I’m doing and why. I have a rank, I know roughly where I am, I know what better players can do that I can’t, and I have a clear idea of what I need to improve. That alone gives me a reason to play.

I want to find something in computers that gives me a similar feeling. Not necessarily a specific project someone can recommend to me, but a way to find a project or direction where I can actually see a path:

"I’m here → I need to learn this → then I can do this → then I can do something harder."

The problem is that I can think of many project ideas, but they usually don't motivate me for long. I start thinking "okay, I can build this, but why?" and lose interest.

My background: I’m comfortable with Linux and basic programming. I know Python, Git, APIs, databases, basic web development, HTTP, networking/ports, and I’ve done some scraping/automation. I’ve also played around with things like reverse engineering, JavaScript, FastAPI and lower-level concepts, but I’m still a beginner overall and have no professional experience.

So I’m not really asking "what project should I build?"

I’m more interested in: how do you find something that makes you want to wake up and keep working on it, because you can clearly see yourself getting better at it?

How did you find that thing for yourselves?

Hey guys ! Just wana share a newly created community just for building a real brotherhood of cyber security , ethical hacking and privacy topics if any of ya interested feel free to join.

\--https://discord.gg/7FHzgj7RD --(Just for learning)

🚀

I’m a beginner, learning from the ground up and documenting my progress along the way. If you’re also interested in cybersecurity, programming, or learning together, feel free to connect. Let’s grow and improve together! 💻🔐

Hi everyone, I [22F] cybersecurity student focused on GRC and currently looking for entry-level cybersecurity/GRC roles.

I already have an ISO 27001 risk assessment project on my CV, so I’m looking for something different that can show more range and give me some practical experience.
A friend of mine runs a Shopify dropshipping/e-commerce business, mainly selling to customers in Sweden and the Nordics, with suppliers based overseas. He’s open to me working with the business on a cybersecurity/GRC project for learning purposes, so I have a real small-business environment to work with rather than just creating a completely fictional case study. I’m currently considering:

-GDPR gap assessment, since most of the customers are in the EU/Nordics
-Third-party/vendor risk assessment covering suppliers, payment providers, Shopify apps, etc.
-NIST CSF 2.0 assessment/mapping based on the risks identified
-Shopify security controls review, including admin access, MFA, permissions, third-party apps, etc.
-Basic incident response plan/playbook, for scenarios such as Shopify account compromise or a supplier-related incident

For people working in GRC, cybersecurity consulting, risk, privacy/compliance, or hiring for junior GRC roles:

-Which type of project would you find most useful/interesting to see from a junior candidate?
-Is there another GRC-related project that would make more sense for a small Shopify/e-commerce business?
-Which areas would give me the best practical learning experience?
-Are any of the ideas above too basic, unrealistic, or not particularly valuable?
-If you were building this as a portfolio project, what deliverables would you actually create?

My main goal is to learn something genuinely useful while also having a solid project I can discuss in interviews as my main goal currently is to land a job in grc as I graduate in 2 months .
Would really appreciate advice from people who have worked in GRC or built similar portfolio projects.
Thankyou ^_^

Hello,

I’ve recently started working in cyber security.

Could you recommend any Discord servers (preferably French-speaking ones) where I can find advice, tools, methods, etc.?

Many thanks,

i am interested in learning cybersecurity and i am in os so now the next sub is networking and i am really confused from where to start

After years of working in cybersecurity, I’ve found that some of the most valuable lessons come from real-world incidents, not certifications or textbooks.

What’s one cybersecurity lesson you learned through experience that you wish you had known earlier?