Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

CompTIA Cloud+ Certification: An Overview [updated 2021]

As usage of the cloud grows, so too does the importance of the CompTIA Cloud+ certification.
Read More
Article

NASEF1: LOCATING TARGET VulnHub CTF Walkthrough

Check out this capture the flag if you’re looking for an entry-level activity to gain some new skills.
Read More
Article

Operation technology sees rise in targeted remote access Trojans and ransomware

Operation technology (OT) is one of the most overlooked segments of the IT sector that attack groups target.
Read More
Article

How to learn Linux: Bring your passion, Jasmine Jackson will do the rest

Linux is essential in many IT and cybersecurity roles. Infosec Skills author Jasmine Jackson explains how you can learn Linux step by step.
Read More
Article

How gamification boosts security awareness training effectiveness 

Gamifying cybersecurity training is one of the best ways to engage your workforce and build an effective security awareness training program.
Read More
Article

Average Project Manager Salary in 2021

Virtually every industry sector needs project managers in their teams to manage projects and liaise between stakeholders.
Read More
Article

Vehicle hacking: A history of connected car vulnerabilities and exploits

New cars have features that need a connection to work, like keyless entry via smartphones or in-car Wi-Fi systems, which can introduce vulnerabilities.
Read More
Article

REvil ransomware: Lessons learned from a major supply chain attack

The REvil ransomware has led to one of the most significant ransomware attacks in history but performed poorly.
Read More
Article

Cloud security engineer: Is it the career for you?

Cloud security engineers keep an organization's data and services secure from malicious actors and make an average annual U.S. salary of $136,485.
Read More
Article

HACKSUDO: PROXIMACENTAURI VulnHub CTF Walkthrough, Part 2

In the previous part of this article, we enumerated the open ports on the target machine and found one HTTP port as open and one SSH port as filtered. We exp
Read More
Article

FLoC delayed: what does this mean for security and privacy?

Is Google’s FLoC initiative able to meet the balance between the privacy of the individual and the needs of marketers?
Read More
Article

How to start learning cybersecurity? Take this free foundations course!

What's the best way to start learning cybersecurity? Keatron Evans hopes his new Cybersecurity Foundations courses are the answer.
Read More
Article

THE PLANETS: MERCURY VulnHub CTF Walkthrough

We will solve a Capture the Flag (CTF) challenge by the author “SirFlash.” You should have some knowledge of Linux and basic pen-testing tools.
Read More
Article

CertNexus CyberSec First Responder: Certification, exam and training details

Learn what it takes to pass the CertNexus CyberSec First Responder (CFR) exam, including what the exam covers, how to train for the exam and more.
Read More
Article

CertNexus Certified IoT Security Practitioner: Certification, exam and training details

Learn what it takes to pass the CertNexus IoT Security Practitioner (CIoTSP) exam, including what the exam covers, how to train for the exam and more.
Read More
Article

Pingback malware: How it works and how to prevent it

Pingback malware is a new malware that uses ICMP to perform all the communications with the C2 server.
Read More
Article

Android malware worm auto-spreads via WhatsApp messages

Malware found hidden in the Google Play store leverages WhatsApp messages to spread to other devices. Learn how it works.
Read More
Article

The state of BEC in 2021 (and beyond)

What are the trends in business email compromise (BEC) in the next 12 months likely to be? Will deep fakes or crypto be the next big thing in BEC?
Read More
Article

Data governance: Is it the career for you?

Data governance is vital for a variety of IT and cybersecurity careers — with an average salary of $200,120 for certain data governance roles.
Read More
Article

Stolen company credentials used within hours, study says

An Agari study shows you have hours to deal with the theft of company credentials.
Read More
Article

How to map MITRE ATT&CK against security controls 

The MITRE ATT&CK® framework provides and easy-to-navigate playbook of how attackers work, from high-level tactics to specific procedures.
Read More
Article

Malware analysis: Ragnarok ransomware

Learn what Ragnarok ransomware is, how it works and how you can defend against it in this malware breakdown.
Read More
Article

ISACA CDPSE domain 3: Data lifecycle

Domain 3 of the ISACA CDPSE certification covers important aspects of the data lifecycle, including how data is collected, stored and disposed.
Read More
Article

How to carry out a watering hole attack: Examples and video walkthrough

What is a watering hole attack, how do they work and what can you do to defend against them? Find out in this walkthrough from Infosec's Keatron Evans.
Read More