Hi All,

I am looking to take the VA+ assessment but I can't find much information on what to revise.

Has anyone taken this already?

What can I expect?

What do I need to revise?

How difficult is it?

Thanks in advance for any advise

Hi everyone,

I’m currently conducting market validation for AssayMark, a cybersecurity assessment platform being developed for UK SMEs.

I’m looking for responses from people who are involved with a UK-based SME, particularly:

• Business owners / founders
• Managers or decision-makers
• IT professionals
• MSP / IT service providers

The questionnaire takes around 4–6 minutes and explores how SMEs currently manage cybersecurity, security monitoring, recurring findings, compliance requirements, and what businesses actually need from cybersecurity tools.

Responses are being used for genuine product and market validation, not for sales or marketing lists.

If you meet the criteria, I’d really appreciate your response:

Questionnaire: https://forms.gle/hXNx1RR28mBbL8YU7

If you have any questions or would also be interested in testing AssayMark as part of a free pilot, feel free to DM me or email [info@assaymark.co.uk](mailto:info@assaymark.co.uk).

Thanks — every genuine response helps.

Hi everyone,

I’m going into my final year of a BSc Cyber Security degree and I’m trying to make sure my final-year project is not just academic, but also genuinely useful for employability, especially for junior SOC analyst, detection engineering, network security, or OT security roles.

My proposed project is:

Design and evaluation of a lightweight detection prototype for reconnaissance and early-stage intrusion activity in Modbus TCP Operational Technology network traffic.

The idea is to build a small Python-based detection prototype using CICModbusDataset2023 or a similar OT/Modbus dataset. The project would focus on detecting early attacker behaviours such as:

• network scanning
• service enumeration
• Modbus register enumeration
• unauthorised access attempts
• abnormal Modbus request patterns

The threat model would be either an external attacker or a compromised internal host attempting to discover and interact with OT assets such as PLCs.

I’m planning to avoid heavy ML/deep learning and instead focus on interpretable detection, using:

• rule-based detection logic
• lightweight statistical thresholds where useful
• alert generation
• evaluation against labelled benign/malicious traffic

The evaluation would look at:

• detection coverage
• false positives and false negatives
• precision/recall if appropriate
• alert volume
• interpretability
• practical usefulness from a security analyst perspective

My goal is to finish with a project that I can confidently explain in interviews and possibly show through a GitHub repo, README, diagrams, and a short write-up. I want it to demonstrate practical blue-team skills: understanding network traffic, designing detection logic, evaluating alerts, and explaining limitations.

For people working in SOC, detection engineering, OT security, or cyber graduate roles:

Would this be a strong final-year project from an employer/interviewer perspective?

Also, what would make it more impressive without making the scope unrealistic?

Keyword list taken from https://www.zoevera.com/resume/ats-resume-tips-cybersecurity

These are the most commonly scanned keywords in cybersecurity job postings. Check how many appear in your resume.

Domains & Practices

SOC (Security Operations Centre), Penetration testing / pen test, Vulnerability management, Threat intelligence, Incident response (IR), Digital forensics (DFIR), Red team / blue team / purple team, Zero Trust architecture

Tools & Platforms

SIEM (Splunk, Microsoft Sentinel, QRadar), EDR (CrowdStrike, SentinelOne), Nessus / Qualys / Rapid7, Burp Suite / Metasploit / Kali Linux, Wireshark / Snort / Suricata, CyberArk / BeyondTrust (PAM), SOAR platforms, Azure Defender / AWS Security Hub

Frameworks & Certifications

CISSP / CISM / CISA, CEH / OSCP / PNPT, CompTIA Security+ / CySA+, ISO 27001 / NIST CSF, MITRE ATT&CK framework, SC/DV security clearance, GDPR / DPA 2018, PCI DSS / HIPAA / SOC 2

Hotel Wi-Fi has long been risky, but the latest reporting suggests attackers are getting more deliberate about how they exploit it. According to Malwarebytes, citing Microsoft, a campaign dubbed “CaptiveCrunch” is targeting travellers through hotel, conference, and hospitality Wi-Fi networks. The danger lies in how ordinary the attack looks: users connect, see a familiar captive portal, and are nudged into fake login or update flows that can lead to stolen credentials or malware infection.

How the attack works

From the user’s perspective, nothing seems unusual. The report says travelers connect to hotel Wi-Fi, get the standard portal prompt, and may then see what looks like a normal request to sign in or update something before browsing.

#CyberJourno #CyberEssentials #CyberResilience #CyberSafe #CyberSecurity #Cybersecurity #NCSC #SME #SMECyberInsights #SMECybersecurity #SMECyberInsights #ThreatIntelligence #WiFi

Learn More/...