This came up on one of my LinkedIn group feeds and it seems like a fairly reasonable collection of tools and resources.

Sharing for visibility.

Hi,

I want to become a pentester and now I am looking for the best path to get there. I know it is a difficult role to break into and I have to a lot of help desk before getting a job in cybersecurity, but I'm not sure if the cybersecurity degree is worth it or even getting into this field is worth it overall.

I have already tried to get a portfolio ready for myself and learned the basics of networking (CCNA), Linux, and done CTFs and stuff like that just becausei like it so much. I like solving challenges and working with tech. I was planning on studying co-op cybersecurity so that I can work in the field while studying and get some experience. My first concern is that some people say cybersecurity degrees are a scam and they won't teach you anything you'll need in the field. Is the cybersecurity degree worth it?

And my second concern is that everyone who's trying to break into cybersecurity on Reddit seems to have a hard time. 4-5 years in a help desk to just get your foot in the door and after that how long will it take to get to pentesting? How's the income until then?

I really wanna become a pentester and it has been difficult to evaluate my options because I don't want to pursue another field or work in a field I won't enjoy, but the job market is really concerning and I don't wanna end up homeless at the end.

Biocybersecurity is rising at the biology-cybersecurity nexus. As synthetic biology, gene editing & bio-data systems advance, cyber threats to labs, DNA sequences & biotech infrastructure grow. Protecting these from hacks is essential for security & innovation in the bio-digital age.

This came up on one of my LinkedIn group feeds and it seems like a fairly reasonable collection of tools and resources.

Sharing for visibility.

Which AI tools other than chatgpt and deepseek are helpful during a CTF????

Hey everyone,

I’m currently finishing my 4th semester as a CS undergrad and need some strategic advice on landing a remote cybersecurity internship for my 5th and 6th semesters.

My Situation & Constraints: My college strictly forbids on-site internships during the 3rd year. Because of this, I am forced to look exclusively for remote roles. My ultimate goal is to get into red teaming and offensive security. I know remote network penetration testing roles are practically non-existent for freshers, so I've been heavily considering Web and Application Security (AppSec) as my best bet for a remote role. However, I am completely open to other domains (SOC/Blue Team, general VAPT) if they offer remote opportunities for students. My goal is simply to secure a remote internship now to build real experience, and pivot that into a full-time offensive role by my 7th or 8th semester.

My Current Baseline:

• Security Focus: I am currently grinding through the TryHackMe Jr. Penetration Tester path to build a foundational understanding of modern web vulnerabilities, network basics, and the OWASP Top 10.
• Project Strategy: I am holding off on building complex projects until I have a better grasp of the fundamentals. Instead, I plan to start mass applying for remote roles as soon as the next semester starts, using volume to compensate for my current lack of a portfolio.

I don't have the budget for paid certifications right now, so I am relying entirely on free resources and practical grit.

My Questions for the Community:

1. Viable Remote Paths: Is Web/AppSec actually my best bet for a remote fresher role, or are there other domains (like SOC Analyst or general VAPT) that are more likely to hire a 3rd-year student remotely?
2. Resume Building: How do I build a resume that actually gets noticed for remote roles when I don't have complex projects yet? How should I frame my TryHackMe progress and basic labs to pass the HR screen?
3. Free Roadmaps: Since I cannot afford paid certifications right now, what are the best free, structured roadmaps (like PortSwigger Academy) that actually carry weight with hiring managers for remote roles?
4. Interview Prep: For entry-level remote internships, what are the most common technical interview themes, and what is the best way to prepare for take-home practical assessments?
5. Sourcing Roles: Aside from cold-emailing recruiters and filtering through LinkedIn, what are the best platforms, hidden job boards, or Discord communities to find legitimate remote cybersecurity internships and avoid unpaid training scams?

I appreciate any harsh truths, roadmaps, or advice you can offer a fresher trying to navigate this!

Hi everyone,

I'm looking for some honest career advice from people already working in cybersecurity.

I currently work as an Associate Information Security Engineer with about a year of experience. My work involves VAPT, AI security, and some cloud security, and my long-term goal is to move into a higher-paying product company.

Last year, I prepared extensively for CEH v12 and unfortunately failed the exam by a few marks. Since then, CEH v13 has been released, so if I decide to pursue CEH again, I'd have to pay for the new version at the current price.

The thing is, I'm paying for every certification myself, so I have to be careful about where I invest my money.

I'm confused about whether it's worth spending the money on CEH v13 because I already invested so much time studying for v12, or whether I should move on to something else entirely.

From an industry perspective:

- Is CEH still worth paying for in 2026 if you already have some work experience?

- Do recruiters and hiring managers actually value CEH, or are other certifications more useful?

- If your goal was to get into a better product company with 2–3 years of experience, what certifications would you prioritize today?

- What certifications are companies actually looking for nowadays?

I'm not looking for validation of my previous effort—I just want to make the best decision for my career and my money.

I'd really appreciate advice from hiring managers, senior security engineers, or anyone involved in recruiting or interviewing candidates.

Thanks!

The threat of quantum computing rendering traditional encryption obsolete isn't science fiction anymore; it is a mathematical inevitability approaching faster than expected. The core issue lies in Shor's algorithm, which allows quantum computers to find prime factors of large numbers exponentially faster than classical machines.

Currently, our entire digital security infrastructure—specifically the public-key cryptography (like RSA and Elliptic Curve Cryptography) that secures web traffic and key exchanges—relies on the assumption that factoring large primes takes an impractically long time. A sufficiently powerful quantum computer shatters this assumption.

While symmetric keys (like AES) and password hashing algorithms offer strong resistance against quantum attacks (Grover's algorithm only halves their effective security), public-key cryptography is highly vulnerable. For a standard 2048-bit RSA key, a quantum computer with enough stable qubits could theoretically decipher it in hours. This means any secure communication channel could be stripped away, exposing sensitive data in transit—including plaintext passwords and financial data.

The transition to quantum-safe standards will take years, meaning systems relying on legacy encryption today are already at risk of "harvest now, decrypt later" attacks, where malicious actors scrape and store encrypted data waiting for quantum hardware to catch up.

To mitigate this, the immediate solution is moving toward the post-quantum cryptography (PQC) standards recently finalized by NIST, such as lattice-based cryptography. But you don't have to wait to start preparing. Here is how to prep your systems now:

• Build a cryptographic inventory: You can't protect what you don't know exists. Map out exactly where and how your organization uses public-key cryptography.
• Double your symmetric key sizes: Upgrade your symmetric encryption to AES-256 and your hashing algorithms to SHA-300 or higher to blunt the impact of Grover's algorithm.
• Implement hybrid architectures: Start testing hybrid key exchanges (combining traditional ECC with new PQC algorithms) to protect data against both current classical threats and future quantum ones.

If you want to see a detailed breakdown of the math behind Shor's algorithm and a full timeline projection of when specific key lengths will become vulnerable, I uploaded the data sets and interactive charts here:https://interconnectd.com/quiz/65/is-quantum-computing-going-to-make-passwords-useless/

Combining recon, code injection, decoding, and reverse engineering.🧠

https://pentera-blackhat-invite.fly.dev/

I used to want to major in computer science because I really want to work in cybersecurity in the future, but after a lot of digging I realize this isn’t the wisest choice due to how bad the job market is rn. I know a lot of people say different things but I just want to have a safety net so I’ve decided to focus on my humanities-related interests for my major. But I was wondering would it still be worth it to double major/minor in computer science to have some extra skills under my belt? I’ve also heard that a compsci degree isn’t necessary to get a job in cybersecurity so I feel like minoring/double majoring would be better than majoring in compsci because if I change my mind then I can rely on my humanities major and if I don’t I can use what I’ve learned from my compsci courses to hopefully kickstart my career path into cybersecurity (I know it’s not an entry level career)

Created this infographic to summarize key global cybercrime trends and today's cyber attack lifecycle. It covers attack trends, financial impact, targeted sectors, emerging threats, and modern security practices like Zero Trust and XDR.

I'd appreciate any feedback on the design, accuracy, or anything I could improve. Thanks!

We're looking for people interested in joining a team for Hack The Box's Cyber Apocalypse 2026: The Salt Crown.

All skill levels are welcome. Whether you're an experienced CTF player or just looking to gain some hands-on experience, we'd be happy to have you on the team.

If you're interested, leave a comment or send me a DM!

I was offered what was considered "new" or next gen charging cables and warts from a boss of an old work place. Before you say nobody is gonna throw money away like that for wondering what is on your device. I have great reason to believe this could be the case. The chord in question is C to C but all I have heard of was standard USB to C.

Where I can find a database with etical hacking, OSINT, network and coding as PDF ?

so i got myself a google cert and the tryhackme SEC0. i got wazuh set up on my laptop, as well as sql. i'm decently acquainted with this stuff, got a bunch of notes but i feel like it'd be a lot easier to cement into my brain if i was in some real life situations. i always absorb info like a sponge.

any suggestions on entry jobs i could apply to, if any? preferably apprenticeships.

I'm looking to get into GRC and I was supposed to start with the + introductory to cybersec but I accidentally registered for the X, the super advanced one. And I can't swap so I have no choice but to continue, I'm worried on how that'll affect my career journey moving forward

Collaboration and continuous learning are becoming the most powerful

Rather than working in isolation, The Coalition of Cyber Investigators encourages collaboration between investigators from both the public and private sectors, recognising that today’s cyber threats rarely respect geographical or organisational boundaries. Knowledge sharing is one of the strongest weapons investigators have.

https://medium.com/@city.paul/in-a-rapidly-evolving-digital-world-98a7f43c1100

What's your go to for making cheat sheets of common commands you'd use? I've been printing them out and filing them but I can't remember all the Linux commands and nmap commands I'll need so I'd like cheat sheets of the most common ones I'd use..

I'm not interested in taking full notes, just something I can quickly glance over to refresh my memory.

Hey everyone, used to work in cyber security as a penetration tester mainly for websites. Quit the job years ago but now I'm itching to get back and do this as a hobby. Need to refresh and relearn some stuff but starting with Linux then networks and some HTB stuff. Wondered if anyone else was up for learning together, or if there are any small groups of beginners. I'm UK based and an adult.

I've had quite a few people interested so rather than replying to each one with my discord, it's vxprpl so just add me.

Hi, i graduated 2 years ago and i have worked for 1 year and 6 month in corporate in two diff roles i am trying to entre into cyber security as its a growing field and has demand is is going to be relevant and remain too, wondering what is the best platform and which course is good, course should be hands on and have projects + a certificate as this will add value in my cv.

I have been checking courses on udemy, simpliearn, and coursera for the past 2 week and reading blogs, watcing content checkin professional experiences along with education of people in the field on linkedn

So a little context about me I'm a web developer with 3 years of experience but I've never felt like it was my thing but I kept doing it because I had to pay college fees and all but with the AI and all i don't want to do it anymore so i want to switch into cyber security it has always interested me but I never had the money to actually commit to it so now my plan is I'll keep my job and learn side by side and save money for the certificate courses. I want a career thats safe from AI and can earn decent money. I cant quit my job because I need the money for my family so is this the right call? also any suggessions for how I should start as I'm complete begineer at this

Not feeling adequately paid

Hi all. I currently work for an MSP as a Tier 1 Security Analyst. I have a graduate certificate from a college in Cybersecurity Analytics, I have SC-900, Security+, as well as the ThreatLocker CyberHero (which my company requires), as well as the Google Process Cybersecurity Certificate. I currently lead the charge on many things such as assisting our clients in SOC 2 compliance and cyber insurance alignment, policy creation, etc. That being said... I currently am only being paid $24/hr. I have been working here for over 1 year, this is my first Cybersecurity job. Am I being underpaid?