عمليات البحث الأخيرة

Empirical Training | Cyber

Empirical Training | Cyber

@empiricaltraining

يتابع
110
المتابعون
477K
الإعجابات
4.2M
الفيديوهات
1.2K

30+ Years of Cyber Expertise Get Cyber Job Ready in 6 Months

Ad

This is how I got into cybersecurity with zero experience. It is usually easier if you have some kind of IT experience or knowledge before going into cybersecurity because cybersecurity is all about defending IT networks so you first need to know what they are. If you are someone who works in IT or is technically minded, I guarantee this pathway will work for you too. If you don’t think it will, join our community and speak to Natasha, we helped her get a cybersecurity job within 3 months of joining our cybersecurity analyst mentorship program!  Plus i’ve been in cybersecurity for the last 8 years so I can also confirm this pathway works! If you think you have what it takes, we have a FREE cybersecurity community which can help you build your own pathway into cybersecurity, go to the link on our page to join! #cybersecurity #cyber مثبت
  • ▶ 137K
  • ♥ 3.6K
  • 💬 50
  • ↗ 808
  • ★ 3K
Looking to break into cybersecurity without IT experience or a technical background? It’s highly unlikely – but not impossible! It really depends on which cybersecurity role you’re aiming for. If you’re targeting a technical position like a cybersecurity analyst, you’ll need to: 	1.	Build a solid understanding of IT and Networking Fundamentals. 	2.	Be open to starting in an IT help desk role. (I worked in IT eight years ago, and it was a game changer for my career!) If you’re willing to spend a year in IT, transitioning to a cybersecurity analyst role becomes much easier. That’s why we recommend the Course Careers IT certificate—it’s proven to help people land IT jobs with no prior experience! Start with IT, and follow this roadmap to smoothly move into cybersecurity.  Comment “tech” to access their free introductory course! #Tech #it مثبت
  • ▶ 53.9K
  • ♥ 1.9K
  • 💬 46
  • ↗ 225
  • ★ 1.7K
SSHole — CVE-2026-123158 — was disclosed 5th November. Less than nine hours later: confirmed root access on a honeypot running Alpine Linux. Here's what happened: OpenSSH on Alpine Linux, without PAM, mishandles oversized passwords on accounts with no password hash set. Send a password between 257-1,024 bytes and OpenSSH mistakenly authenticates you. No credentials needed. The detection signature is in the SSH auth logs: - Authentication success from an IP with no prior history - Non-interactive session running id, uname, hostname — post-exploitation recon - Known malicious IP: 89.116.89[.]18 (geolocated Japan) — already in threat intel feeds If your org runs Alpine Linux or any musl-based system: patch to OpenSSH 10.6p2 now. For an IT support analyst — this is exactly the alert type you'd escalate.
  • ▶ 287
  • ♥ 16
  • 💬 0
  • ↗ 0
  • ★ 3
As a SOC analyst, you will usually have to analyse a PDF attached to an email or sent to an employee.  A great way to do that is with App.Any.Run which we call a auto sandbox. It’s a in browser tool that allows us to analyse files without opening them on our computer.  I will check if it drops any suspicious processes, makes any strange connections outbound or contains any suspicious links!  If we find anything, I would then block the user from opening it and check if anyone else also received it!
  • ▶ 314
  • ♥ 23
  • 💬 1
  • ↗ 0
  • ★ 4
Not a motivational post. An honest breakdown. Month 1: Create your Evidence Portfolio. Set up the lab. Run your first scan on your own system. Write up what you find. That write-up is your first portfolio piece. Month 2: SIEM. Learn to query. Take a failed login scenario and run it start to finish — query, triage, document. Month 3: Advanced threats, hunting, threat intel. Start using real breach data in your investigations. Month 4: Cloud, AI and compliance. AI is changing what entry-level SOC work looks like — hiring managers are starting to test for it. Month 5: Career accelerator. Start applying. Your portfolio goes in every application. Month 6: Extended labs and bonus projects. This is where most people get the callback. One of our mentorship students sent 300 applications over 4.5 months before getting the interview — then got the job. The portfolio was the difference. #cybersecurity #itsupport #socanalyst #careerchange
  • ▶ 396
  • ♥ 18
  • 💬 0
  • ↗ 0
  • ★ 10
Our focus is helping people going from IT professionals to landing blue team roles. But this time we helped him land a penetration testing role and we’ll continue to support him on the job with the red team focused people we have in our community too!
  • ▶ 268
  • ♥ 5
  • 💬 0
  • ↗ 0
  • ★ 0
Are cybersecurity analysts relying on AI, aren’t they?  I guess we’ll never know 🤷🏻‍♂️
  • ▶ 555
  • ♥ 18
  • 💬 0
  • ↗ 0
  • ★ 1
Cybersecurity has really been life changing for me and I wouldn’t change anything in my career.  The first 5 years I was office based doing shift work as a SOC analyst and last 6 years remotely as an incident response consultant! #cyber
  • ▶ 989
  • ♥ 13
  • 💬 1
  • ↗ 0
  • ★ 4
The group the FBI says is behind the $6.3 billion Binance hack has a favourite trick. A fake job offer. 💼 Binance hasn't said how its engineer's laptop got compromised. But US government advisories on TraderTraitor describe the same pattern again and again: 1️⃣ A "recruiter" messages an engineer on LinkedIn or WhatsApp 2️⃣ The role sounds amazing and pays well 3️⃣ There's a "technical test" or an app to download 4️⃣ That download is malware, running on a work laptop If you're job hunting right now, this is aimed at people exactly like you. Real recruiters don't send you software to run. And a SOC analyst's job is to spot that download the moment it phones home. Have you ever had a job offer that felt too good to be true? 👇 #cybersecurity #northkorea #binance #jobscam #socanalyst
  • ▶ 440
  • ♥ 6
  • 💬 0
  • ↗ 0
  • ★ 3
Developers updated their AI coding assistant last week. Some of them got a backdoor. 🚨 On 29 October, two malicious versions (2.1.312 and 2.1.313) of the Claude Code extension appeared in Cursor's extension marketplace for about 11 hours. Anthropic didn't build them. Someone else slipped them in. What they did: 🔍 Sent the attacker your hostname, username, Git email and public IP 🔑 Added the attacker's SSH key to your machine 🕳️ Tried to open a reverse SSH tunnel back to the attacker 🔁 On Mac, hid in a LaunchAgent named to look like an Apple process On most machines the SSH part needed admin rights it didn't have. But the key and the persistence still got installed. Uninstalling the extension alone doesn't clean it up. AI tools are now one of the easiest ways into a company. Someone has to find this on every laptop. That's blue team. #cybersecurity #ai #macos #malware #supplychainattack
  • ▶ 504
  • ♥ 23
  • 💬 2
  • ↗ 1
  • ★ 5
Binance didn't lose $6.3 billion to some genius blockchain hack. Binance says it started with one laptop. 💻 Here's what we know so far: 1️⃣ Binance's early findings point to a DevOps engineer's laptop being compromised 2️⃣ From there, the attacker reached a service container that could push withdrawals 3️⃣ On 29 October, roughly $6.3 billion moved out across ten blockchains, most of it in about 20 minutes 4️⃣ The FBI and blockchain firm TRM Labs have attributed it to North Korea's "TraderTraitor" group 5️⃣ Around $3 billion has been frozen, and Binance says it will cover customer losses #cybersecurity #binance #cryptohack #incidentresponse #socanalyst
  • ▶ 614
  • ♥ 22
  • 💬 2
  • ↗ 2
  • ★ 1
The attackers had about 20 minutes to drain Binance. Here are the 4 places a SOC analyst could have stopped it 👇 1️⃣ The laptop. EDR flags a developer machine running something new, opening odd connections or touching credential stores. Isolate the host. In IT support you've already pulled a dodgy laptop off the network. 2️⃣ The login. Credentials from that laptop are used to reach production infrastructure from an unusual device or at an odd time. That should fire an alert, and someone revokes the sessions and tokens. 3️⃣ The container. Someone runs commands inside a service container that normally only talks to other services. A detection rule should be watching for that. 4️⃣ The withdrawals. Billions leaving in minutes, across ten chains at once. That's a volume anomaly. An automated circuit breaker should pause it before a human even reads the alert. None of that is magic. It's logs, baselines and someone asking "is this normal?" The same question you ask every time a user says "I didn't click anything." If you want to know which of these skills you already have from IT, DM me how long you've been in IT and I'll tell you 👇 #socanalyst #incidentresponse #binance #blueteam #itsupport
  • ▶ 567
  • ♥ 37
  • 💬 0
  • ↗ 4
  • ★ 5
5 Tools you need as a cybersecurity analyst - [ ] CyberChef - [ ] Hybrid Analysis - [ ] Ultimate Windows Security - [ ] Codeshare - [ ] Regex 101
  • ▶ 926
  • ♥ 36
  • 💬 0
  • ↗ 4
  • ★ 37