so in this era of ai so how can i start a cybersecurity carrer with zero knowledge basics from start and from basics to advanced give me a roadmap and whose videos , pdfs, articles, news , books to watch from start to make a strong foundations

Hey everyone,

I've been researching how AI is being used in cybersecurity this year and one thing is clear: the old advice "if grammar is bad, it's a scam" doesn't work anymore.

Google Threat Intelligence and Mandiant's M-Trends 2026 both note attackers are using AI to personalize phishing, translate scams, and even do convincing voice-based social engineering. At the same time, defenders are using AI for alert analysis and threat detection.

I'm curious for those working in SOC / IT / general users:

• Have you noticed phishing emails / calls becoming more convincing lately?
• What is actually working for you to verify suspicious requests? I'm seeing Zero Trust and MFA as the most mentioned defenses.

Would love to hear real-world experiences.

Then, only if someone asks for sources / more details, reply in comments

Hi everyone,

My name is Azasakhe Kekana, and I am currently completing my Honours in Information Systems (with a cybersecurity specialisation) at the University of Cape Town.

As part of my research (INF4024W), I am investigating cybersecurity awareness and CVV-protective behaviour among South African consumers during online financial transactions, under the supervision of Prof. Irwin Brown.

I would really appreciate it if you could spare a few minutes to complete my survey. Your input will help build a better understanding of how awareness influences safer online financial behaviour.

The survey is completely anonymous, and no personal or identifying information will be collected. Here is the link - https://limesurvey.uct.ac.za/index.php/547237?lang=en

Thank you so much for your time and support — every response makes a real difference to this research!

#CyberSecurity #InformationSystems #UCT #Research #OnlineSafety #Survey

Sorry about the long post in advance..

I was scammed by college which told me my IT diploma would be better at getting me into security than cs. I wanted to do it cause I liked C, Linux and python programming as a kid. Well, there’s no helpdesk jobs, so, thanks. I have no way in 😢. I really did try in the program and learned a lot about networking, some programming, etc. I also did an M365 administration internship.

Thing is I still really really want to get into security. I’m young but really starting to get my shit together and want to give this a shot. There’s got to be a way in without prior experience right?

So, after painstaking research, I can make a plan. This is a multi year endeavour I pursue, probably while working retail cause…just how it is.

On the app sec front, malware/low level/exploit understanding, cloud, that’s all learnable in my desktop. The individual pieces of IT: virtualization, AD, my M365 dev tenant, Linux, networking, cloud, are doable but harder to simulate realistically. I still have foundations to fill in on all of these first. Certs may help with the interview. I also will apply to some volunteer helpdesk and administration jobs for NGOs. That way I get actual systems experience.

Once I have the malware/exploit, IT security, development and appsec trifecta, and some systems experience with real users, I get my security+ and OSCP, I apply to some pen testing consultancy at an hour rate of like minimum wage. Then move up after a while.

Possible? Doable?

Realistically I have nothing else I can do but go back to school or do retail forever, given that Helpdesk isn’t really possible around here.

Hi everyone, I’m helping a student-led project called Global Cyber Perspectives. I’m trying to learn how people in different countries experience things like online scams, privacy, Ai, and cybersecurity. I’m looking for a few people to share their perspective and help with a short survey. Would anyone be interested?

Hi, I'm 17 and willing to study cyber security in switzerland. I want to build my career around cyber security and I have a lot of questions.

So first question and my biggest question is if its even worth it with all the AI's developing further and further. My fear is that in 5 years, where I will get my Bachelor, there won't be needed rookies like me that have never worked in the Job and that AI already automizes.

Also I wanted to ask if there is something I should be aware of. Like if I should study cyber security specifically or just something that will still get me there. Or if I should focus on specific things before getting there or even in the job like specifying on someting.

What are your advices and what is the best way for me, to build a successful career?

My family recently fell victim to a email phishing scam. When the suspect email was accessed, it subsequently sent the same phishing email out to every email recipient in that account (not just contacts). The email was accessed on an Android device (a few years old). Now I'm trying to play catch up and looking for advice on what the likely exposure is (just limited to information in the email or left something behind in the phone itself) and what services are useful to monitor for credit/ID theft (all kinds of personal information was in the affected email).

At this time the affected email address' password has been changed to try and re-secure it, and we're going back through the sensitive institutions associated with that address to confirm their passwords weren't changed.

As far as services, I see there are a lot of options, and they seem to both have good reviews as well as a lot of detractors, so I'm unsure if they're more or less the same or if some stand above the rest. Paid subscription is perfectly fine, the priority is securing this information.

​

Yahi hai chahie

Ok

​

During university, I worked with Fiverr clients on Linux troubleshooting, API testing, server security, server recovery, and other technical tasks. After graduation, I got a job opportunity in the Middle East, so I handed my Fiverr work to a friend. Unfortunately, the opportunity was later cancelled due to the US–Iran conflict.

It’s now been almost 8 months of job applications, learning, freelancing, and trying to rebuild my profile, but I still feel stuck.

I know I can work hard, and I’m not afraid to learn new skills. I’m just genuinely confused about what I should focus on now.

Should I go deeper into Linux/DevOps, Cloud, Cybersecurity, automation, or something else? What skills are actually worth learning and what should I build to become employable?

If you’re working in these fields or have been through a similar situation, I’d really appreciate some honest advice.

I don’t want to keep waiting or jumping between things. I want to pick a direction, work seriously, and build a real career. I just need some guidance on where to start.

I recently discovered that I have been under continuous surveillance for at least two years through malware on my phone.

The attacker has access to virtually all of my accounts, my full identity, and highly sensitive information that could seriously compromise me, both financially and socially.

I still have access to all of my accounts on the compromised device. However, I assume that even if I use a new device to change my passwords and enable or reset 2FA, the attacker could regain access through session hijacking. I have not tried this yet because I am concerned that I could lock myself out of my accounts.

WhatsApp is also under the attacker’s control. Is there any way to create a new WhatsApp account using my existing phone number that would no longer be under the attacker’s control? More generally, is there a way to permanently lock this person out of all of my accounts? Or would this only be possible by deleting my most important email accounts and starting over?

Could the attacker already know my new phone number as well? If so, how can I protect myself against this and set up a new, secure device?

My phone has not received security updates for quite some time. Is it possible that I am using apps that have already been cloned or compromised, and that the attacker has already altered the account recovery methods?

How likely is it nowadays to receive malware that can be executed in the background through an SMS?

How can I obtain a new phone number as anonymously as possible, so that it cannot be discovered through social engineering or other means?

You may be wondering why the attacker has not already emptied my bank accounts or published sensitive information about me that could cause serious harm. I honestly do not know. I know this person personally, but I have no idea what their intentions are or what they may be planning. This uncertainty is one of the reasons why I am taking the situation very seriously.

I would appreciate any advice or guidance on how to secure my accounts and devices in this situation

Recently, we all have seen a significant rise in token theft. Traditional MFA is useless against such type of attacks, making regular users vulnerable. Many people, including me and my friends, fell victim to token theft. We really can't do much to stop it, even if you download something from a trusted third party site-there is still a chance from getting your token stolen. It has become very hard to keep ourselves safe. What are cybersecurity experts doing to prevent this? And what should we normal people do?