Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

HelloKitty: The ransomware affecting CD Projekt Red and Cyberpunk 2077

Learn about HelloKitty, the ransomware video game developer CD Projekt Red was subjected to.
Read More
Article

Introduction to Secure Software Development Life Cycle

Learn all about the Secure Software Development Life Cycle.
Read More
Article

Security awareness manager: Is it the career for you?

Learn all about the role of a security awareness manager and find out a career in security awareness is a good fit for you.
Read More
Article

Whitespace obfuscation: PHP malware, web shells and steganography

How to deal with whitespace obfuscation and what to be aware of.
Read More
Article

Cybersecurity Weekly: DOJ prioritizes ransomware, CODESYS flaws, Realtek bugs

The U.S. gives ransomware hacks a similar priority as terrorism. Ten critical flaws were found in the CODESYS industrial automation software. Researchers warn of critical bugs affecting the Realtek Wi-Fi module. All this, and more, in this week’s edition of Cybersecurity Weekly.
Read More
Article

Top 18 tools for vulnerability exploitation in Kali Linux

There are many tools that hackers can use to perform exploitations of discovered vulnerabilities across a variety of systems and platforms
Read More
Article

Penetration tester salary

For some, aiming for one of the most glamorous or cool jobs is their cup of tea. For many in information security, that’s being a penetration tester. Much li
Read More
Article

Explore Python for MITRE PRE-ATT&CK, network scanning and Scapy

Learn how to use Python for reconnaissance, which is one of the pre-attack stages of the MITRE ATT&CK framework.
Read More
Article

WPWN: 1 VulnHub capture the flag walkthrough

This easy capture the flag exercise from VulnHub provides a good hands-on experience.
Read More
Article

Dependency confusion: Compromising the supply chain

Public packages can be exploited and replaced with malicious ones at even the largest companies like Apple and more.
Read More
Article

Become a cyber first-responder with this intrusion detection course

Defending an organization from intrusions is a sought-after skill set. Mark Viglione explains if this is the right type of career for you.
Read More
Article

Role of digital signatures in asymmetric cryptography

Digital signatures are used for verification and authentication. See the steps to create a digital signature — and their applications.
Read More
Article

BendyBear: A shellcode attack used for cyberespionage

BendyBear malware has proven to be one of the most dangerous, and a threat to countries across the world.
Read More
Article

Android security: Everything you need to know [Updated 2021]

Android devices have a host of security risks, but updates are helping to mitigate them.
Read More
Article

3 tracking technologies and their impact on privacy

Tracking technologies affect consumers' privacy online and off the web. Let's take a look at the three most popular tracking technologies and their impact.
Read More
Article

Cybersecurity Weekly: Job offer ID theft, Bluetooth vulnerability, SolarWinds hackers target think tanks

How to tell a job offer from an ID theft trap. A Bluetooth vulnerability enables hackers to mimic genuine devices. SolarWinds hackers target think tanks with a new NativeZone backdoor. All this, and more, in this week’s edition of Cybersecurity Weekly.
Read More
Article

Risks of preinstalled smartphone malware in a BYOD environment

Mobile devices used for work need to be secured to protect against malware.
Read More
Article

In-game currency & money laundering schemes: Fortnite, World of Warcraft & more

In-game currency has become a source of money laundering in popular video games.
Read More
Article

DreamBus Botnet: An analysis

DreamBus has become a significant threat, mining cryptocurrency for cyberattackers
Read More
Article

Malware analyst: Is it the career for you?

Wondering how to become a malware analyst? Get insight into the latest malware analyst careers and skills from an industry expert.
Read More
Article

How to run a software composition analysis tool

Learn the pros and cons of software composition analysis (SCA) and how it can help protect your application from attacks.
Read More
Article

How to run a SAST (static application security test): tips & tools

Learn the pros and cons of static application security testing (SAST) and how it can help protect your application from attacks.
Read More
Article

How to run an interactive application security test (IAST): Tips & tools

Learn the pros and cons of interactive application security testing (IAST) and how it can help protect your application from attacks.
Read More
Article

How to run a dynamic application security test (DAST): Tips & tools

Learn the pros and cons of dynamic application security testing (DAST) and how it can help protect your application from attacks.
Read More