r/learncybersecurity

▲ 24 r/learncybersecurity+1 crossposts

I'm just starting to study cybersecurity. I need systemic knowledge. What do you recommend?

I've been thinking about gaining knowledge and experience in programming for some time now. Specifically, I want to work in cybersecurity, but I'm still unsure how to structure my studies. What are the foundations of knowledge in this field?

I have experience self-studying psychology and philosophy. These fields are fairly straightforward in structure. Therefore, I'm turning to experienced professionals for advice on where and how to find information to structure my cybersecurity studies. Thanks in advance, guys.

reddit.com
u/arlecco — 7 days ago
▲ 0 r/learncybersecurity+3 crossposts

If AI is making you question cybersecurity as a career, read this

Everyone’s talking about AI replacing cybersecurity jobs.
But honestly, people who know how security actually works will always stay valuable.

The bigger issue is beginners getting lost between random certs, YouTube rabbit holes, and outdated roadmaps.

So I put together a structured roadmap with resources, tools, SIEM/SOC paths, cloud, malware, detection engineering, etc.
It’s the kind of thing I wish someone handed me earlier.

Dropping it in here for anyone who needs direction.

https://cybersec-roadmap-opal.vercel.app

reddit.com
u/bugbeeboo — 4 days ago
▲ 34 r/learncybersecurity+3 crossposts

I’ve been using TryHackMe for around 3 months now, mostly following the guided paths and doing beginner–intermediate labs. Now I want to start doing more practical, real-world style stuff — things that aren’t as guided and require more independent thinking.

Here’s my TryHackMe profile if anyone wants to check: https://tryhackme.com/p/divyanshakya966

Discord: https://discord.gg/nDqujVyE

I’m looking to connect with people who are in a similar phase (or even slightly ahead/behind) and want to actually practice together — CTFs, boxes, sharing approaches, and discussing where we get stuck.

If you’re working through THM/HTB or starting to explore beyond it, feel free to reach out.

u/Qu4ntum_cyb0rg — 7 days ago

Hey guys, it's been very hard to learn Cybersecurity topics on YouTube. There is so much content but unorganised. So if anyone has gone through this or have any good suggestion please contribute your knowledge and experience about it. It will be great if you tell the subject with the channel name. Thanks

reddit.com
u/Reader0671 — 8 days ago
▲ 167 r/learncybersecurity+2 crossposts

"Reminder to users: salary figures are US-based averages and may vary significantly by region, experience, and employer. Do your own research before pursuing any certification solely based on salary claims."

u/Infamous-Mulberry681 — 13 days ago
▲ 39 r/learncybersecurity+1 crossposts

Cybersecurity Interactive Career system

One thing I’ve noticed in cybersecurity (especially for beginners) is that most people don’t fail because they’re not capable — they fail because everything is scattered.

You’ve got YouTube videos, random notes, roadmaps, advice threads… but no real structure that tells you what to do today, tomorrow, and next week in order.

So I put together something simple for that exact problem.

It’s called CyberLaunch — an interactive offline HTML system that works like a guided cybersecurity career dashboard.

Instead of reading through static PDFs or jumping between resources, it gives you a structured path from:

overwhelmed → structured → job-ready

What it focuses on:

  • A structured 30-day cybersecurity roadmap
  • Resume + LinkedIn setup guidance
  • Portfolio project direction
  • Interview prep basics
  • Job application tracking
  • Daily action + progress tracking system

The goal isn’t to overload you with information, it’s to give you a system you can actually follow consistently so you stop guessing what to do next, It's something i needed when i first entered Cybersecurity

CyberLaunch on my page

u/Remarkable_Meeting94 — 3 days ago

May I ask about learning to cybersecurity?

Hi! I’m 29 and start learning Pre Security Path from TryHackMe. It’s fundamental path on their roadmap. But I feel like I need to learn more deeply and the resources on their Pre Security Path are not enough for me as absolute beginner (it doesn’t mean their resources are not good. Just my opinion).

Should I learn Comptia Network+ and Security+ first before I learn from TryHackMe? Or Should I still learning their pathway?

reddit.com
u/ymt-rdd1815 — 3 days ago

I have both my bachelors and masters in criminology. I have heard that to get into digital forensics, I would also need to be knowledgable about aspects in cybersecurity. I have a slight idea about what I need to know but I’m not sure to what extent.

If anyone is in the similar field, tell me what I need to be learning? Currently, I am learning like the super beginner terms in network basics. Took me a while but I managed to download unbuntu linux on my laptop. I’m not sure where to go now. Would really appreciate if anyone could guide me through step by step :(

reddit.com
u/Wrong_Crew_1835 — 7 days ago
▲ 6 r/learncybersecurity+1 crossposts

I started learning cybersecurity a while ago but stopped because I wasn’t consistent and lost momentum. Now I’m stuck — I want to get back into it, but honestly it doesn’t feel that interesting anymore, which makes it harder to stay disciplined.

Has anyone else gone through this?

How did you restart when motivation wasn’t there? I’d really appreciate advice on:

- How to make learning cybersecurity engaging again

- Simple plans or routines to stay consistent

- What topics or hands-on stuff I should focus on first

Right now I feel like I’m just forcing it without direction. Any guidance or realistic study plans would help a lot.

Thanks in advance.

reddit.com
u/Mr_King244 — 9 days ago

help me decide!!!

I want to try to shift my career towards the cyber security space. The reason behind that is I feel like AI is becoming something which is helping people to create a lot more but a lot fewer people are going towards cyber security which keeps the builds safe!

From my childhood I had a kind of syndrome, you can say, to save someone from something. That's kind of a mindset I have from my childhood. Eventually throughout my life I kind of helped someone in a good way or a bad way. Either some people got my help and became better and some people became worse. However it is, I have this habit of helping people out of nowhere. I have been working with AI since 2022. I created content, application, automations, and everything with AI and I started feeling it's boring. Right now there is not much help I can do because all the models are becoming so good at doing some things that people will not need anything else than AI.

The real issue arrives when I see people are getting attacked by cyber criminals and stuff like that. They breach their data and it kind of makes me feel like I want to help. The real issue is I do automations and everything with AI so it's kind of shameless to say that I don't have any prior coding skill. I know how to read codes but I don't know anything about how to write. I can go through a JavaScript language and I can sense that this is the code, this is doing this and this is doing that. I would rate myself two out of ten in coding knowledge.

With this kind of knowledge and my background in AI LLM, I want to implement all my skillset and passion to start pursuing cyber security as a long-term career. My current career is doing well. It's not that I am not happy with what I have but I already declared the syndrome I have and I want to pursue that syndrome, maybe something kind of a God's plan in my mindset. I am randomly yapping on my voice so it might get long but I would appreciate if you read through everything.

I want help and advice from you guys. How can I be a cyber security expert? What should I do? What should be my steps? There are a lot of niches within cyber security and which niche should I pursue? I have a specific skill set on AI LLM prompt and other things related to AI and web development so which path should I go ahead with in the cyber security space?

Also since I think this is a cyber security based subreddit, there are a lot of cyber security experts who might need help with an assistant. I am very capable of managing everything with AI and may help any expert who is willing to help me learn how to do cyber security. If you want, I can create a content growth system. I can help you grow your social media account. I can help you build custom apps or anything you would like that's possible with AI and a human mind. I can do it for you.

In return I want to stay close to an expert, maybe as an online virtual assistant, to learn and actually understand how this world works before I make the decision to finally pursue my career as a cyber security expert. Hope I will find help in this group.

Thanks for reading all this long post. If you haven't read, that's also good. No issue. I'm just kind of desperate

reddit.com
u/Chance-Obligation573 — 3 days ago

Cybersecurity or DFIR Abroad?

Here’s a cleaner Reddit version that still feels personal and genuine:

Hi, 22F here. I recently completed my Bachelor’s in Forensic Science from National Forensic Sciences University and I’m planning to study abroad for my Master’s in Winter 2027 intake (Jan/Feb).

Since I come from a non-tech background, I’m confused between choosing Cybersecurity or DFIR/Digital Forensics. Till then, I’ll be completing my Cyber & Ethical Hacking certifications to build my technical foundation.

I don’t come from a rich family, so studying abroad would entirely depend on an education loan, which honestly makes this decision feel even heavier. I really want to build a stable career, but the current job market discussions online are making me anxious.

Which countries are actually good for these fields right now in terms of education + jobs? And realistically, how difficult is it for an international student with no prior work experience to land a job after a Master’s?

Is the market genuinely saturated, or is it still possible to build a career if someone is skilled and willing to work hard?

reddit.com
u/midnightsyllabus — 5 days ago

hth

Soy nuevo en el mundo del hacking ético,literalmente no sé nada de nada, ni de programación o similares. La verdad me interesa mucho el tema del hacking ético y la ciberseguridad, pero no sé por dónde "empezar a aprender". He visto que muchos de los hackers éticos (o no éticos) son autodidactas y aprenden por sus medios, yo quisiera saber por cuál medio empezar o algo así(cómo foros, libros, videos; lo que sea, estoy dispuesto a aprender), entiendo que una persona autodidacta jamás tendrá el mismo conocimiento que una persona con la carrera, pero siento también que es excelente primer paso antes de la universidad.

Gracias por su atención.

reddit.com
u/individualthought3 — 5 days ago
▲ 20 r/learncybersecurity+1 crossposts

Not a replacement for studying but if you're in crunch mode or just need to lock in the framework before walking in, this is the one sheet I kept coming back to. Covers the auditor mindset, all 4 active domains, key traps that kill easy marks, and the BEST answer strategy with plain English explanations. (improved version)

u/Infamous-Mulberry681 — 10 days ago
▲ 7 r/learncybersecurity+1 crossposts

I have 3 months of holidays and then my 3 year will be starting, which is my last year as I am doing Bca(Cyber Sec). In 3rd year companies will be coming and though most of the Bca folks get Non tech placement but I want to only go in Tech or else off campus. Please give me suggestions on what I should focus on in these 3 months and skills I should develop. Any tips will be appreciated. I am also doing a volunteer ship in Cyber police for 3 months....pleasee help meeee!!!

reddit.com
u/Flat_Protection_2837 — 12 days ago
▲ 0 r/learncybersecurity+1 crossposts

Online training works perfectly fine if it includes hands-on labs and real practice. In fact, many professionals learn online. The key is choosing the right program and staying disciplined.

reddit.com
u/Real-talks4512 — 8 days ago
▲ 20 r/learncybersecurity+1 crossposts

We often talk about "managing risk," but actually building a repeatable process for it is where most organizations struggle. This infographic, provides a high-level roadmap of the six essential steps for a solid risk management program.

Step 1: Define Scope and Assets

Start by establishing the boundaries of your risk management program. Which business units, systems, and data are in scope? Document your asset inventory hardware, software, data, and third-party dependencies. This baseline is the foundation everything else is built on.

Step 2: Identify Threats and Vulnerabilities

Map potential threat actors (cybercriminals, nation-states, insiders) against known vulnerabilities in your environment. Use threat intelligence feeds, vulnerability scanners, and penetration testing results to build a realistic picture of your exposure. Don’t overlook human and process vulnerabilities phishing and misconfiguration are among the top attack vectors.

Step 3: Conduct a Risk Assessment

For each identified threat-vulnerability pair, evaluate the probability of exploitation and the potential business impact. Use established methodologies such as NIST SP 800–30 or ISO 27005 to structure your assessment. Document findings in a formal risk register.

Step 4: Prioritize Risks Using a Risk Matrix

Plot identified risks on a risk matrix a grid that maps likelihood against impact. This visualization helps prioritize remediation efforts. High-likelihood, high-impact risks demand immediate attention; low-likelihood, low-impact risks may be accepted or monitored.

Step 5: Implement Controls and Countermeasures

Based on your prioritized risk list, select and implement appropriate controls. These may include technical controls (multi-factor authentication, encryption, network segmentation), administrative controls (security policies, training programs), and physical controls (access restrictions, surveillance). Align control selection with your chosen risk management framework.

Step 6: Monitor, Audit, and Improve Continuously

Deploy continuous monitoring tools SIEM platforms, vulnerability management systems, and threat intelligence services to detect changes in your risk posture. Schedule regular audits and risk reassessments (at least annually, or after significant changes). Treat risk management as a living program, not a static document.

u/Infamous-Mulberry681 — 8 days ago

I’ve been building a small private “vault” where cybersecurity people can share tools, scripts, and findings without everything being public.

Right now it’s super early — just testing the idea and structure.

It’s invite-only for now because I want to keep it small and useful, not flooded.

Curious what you guys think about something like this — would you use it?

(If you want access, there’s a request form in my profile)

reddit.com
u/youngbill44 — 8 days ago