Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Infosec 2022 scholarship winner Anthony Torres: Bringing the Marine Corps ethos to the cyber domain

Anthony Torres, a 2022 Infosec Scholarship winner and Marine Corps veteran, drives ahead toward his next challenge: earning a Ph.D. in cybersecurity.
Read More
Article

Galaxy S22 hacked in seconds, U.S. COVID funds stolen and the Zombinder Android campaign

Samsung Galaxy S22 exploited in 55 seconds, hackers steal millions worth of U.S. COVID relief money and the Android Zombinder threat. All this and more.
Read More
Article

The information security risk analyst salary guide

Information has become our society's lifeblood as the world has primarily shifted to the digital sphere. What comes with this is a heightened need to secure
Read More
Article

Infosec Scholarship winner Chris Chisholm knows the power of service and diversity in cybersecurity

2022 Infosec Scholarship Winner Chris Chisholm will build on his military service to help fight back against tomorrow’s evolving cyber threats.
Read More
Article

Your definitive guide to the CompTIA Project+ Certification

Is the CompTIA Project+ certification for you? If so, read on to learn everything there is to know about Project+ and how it can uplevel your career prospects now.
Read More
Article

Executing the Sandworm APT: Lab and walkthrough

Learn the techniques the Sandworm APT hacking group used to compromise, pivot from and destroy a server. Then try to do it yourself.
Read More
Article

Trojan steals Facebook info, LastPass suffers another breach and Cuba ransomware warning

Android trojan steals Facebook credentials of over 300,000 users, LastPass experiences another breach and Cuba ransomware alert. Catch all this and more in t
Read More
Article

Cybersecurity engineer job & salary

Learn about cybersecurity engineer salaries and explore factors that will help determine how much this role can earn.
Read More
Article

Using persistence to maintain a foothold: Example and walkthrough

Learn how threat actors use MITRE ATT&CK® persistence techniques to maintain a foothold in an environment. Then try the techniques yourself.
Read More
Article

WhatsApp data leak, DraftKings accounts takeover and the evolution of Ducktail malware

WhatsApp data leak puts almost 500 million users at risk; cybercriminals drain DraftKings breach and Ducktail malware. Catch all this and more.
Read More
Article

One phishing attack could expose your entire hospitality network

What's missing from your hospitality training? Regular cybersecurity training, and it's putting your organization's reputation on the line.
Read More
Article

Betta Lyon Delsordo, Infosec scholarship 2022 winner, is a true life-long learner

A journey that begins in Montana with self-taught coding, Betta Lyon Delsordo is a 2022 Infosec Accelerate Scholarship winner.
Read More
Article

Privacy compliance and security: Are you collecting too much data?

With data storage so cheap, enterprises have been over-collecting consumer data. Now may be the time to re-evaluate that approach.
Read More
Article

Pivoting and proxychains with MITRE ATT&CK: Example and walkthrough

Learn how adversaries leverage hardware to pivot into a protected network. Then try it yourself in our cyber range.
Read More
Article

Fangxiao spoofs big brands, Instagram impersonators target students and Feds’ Hive warning

Campaign spoofs over 400 brands, cyberattackers target U.S. university students with Instagram phishing, Feds’ Hive ransomware warning and more.
Read More
Article

Recon and resource development with MITRE ATT&CK: Example and walkthrough

Learn the MITRE ATT&CK® techniques adversaries use for reconnaissance and resource development. Then try it yourself in our cyber range.
Read More
Article

ISO 27001 security awareness training: How to achieve compliance

Security awareness training is an ISO 27001 standard. Learn how Infosec IQ can help achieve compliance and build a culture of security.
Read More
Article

Inside a DDoS attack against a bank: What happened and how it was stopped

Distributed denial-of-service attacks are often used to disrupt websites. Learn how one bank got attacked and what they did to stop it.
Read More
Article

Dropbox hack, TikTok’s user data confession and new Android VPN spyware

Dropbox discloses hack of 130 GitHub repositories, TikTok admits Chinese staff can access EU and UK user data, and a new Android VPN spyware.
Read More
Article

API security best practices: What you need to know

APIs have become the new network, but their changing role has made them vulnerable to abuse. Learn how to secure them.
Read More
Article

Drinik malware returns, CISA unveils critical performance goals and rise in global data breaches

Drinik malware returns on Android, CISA announces cybersecurity performance goals for critical infrastructure and the rise in global data breaches.
Read More
Article

Certifications compared: PMI’s PMP versus CompTIA's Project+

When browsing through job opportunities, you might notice that several positions require project-related skills. The project management-oriented labor force,
Read More
Article

Average CompTIA Linux+ salary [2022 update]

With open-source talent increasingly difficult to find, it’s an excellent time to be in this field. According to The Linux Foundation’s 10th Annual Open-Sour
Read More
Article

Microsoft data breach, CISA FIDO push and cybersecurity worker shortage | Cybersecurity Weekly

Microsoft confirms data breach, CISA encourages Fast IDentity Online (FIDO) adoption and the growing cybersecurity worker shortage drives larger salaries.
Read More