uShield
Cyber Security
A tabletop exercise that ends with a pleasant discussion and no changed documents was theater. Here is how to run drills that produce artifacts — and why the communications plan is usually the first thing to fail.
Read More
Multiple studies have found that click-through-rate training barely moves real-world resilience. The programs that do work stopped measuring clicks and started measuring outcomes.
Read MoreA browser-based, hands-on training platform. Its SOC Level 1 path covers defensive tooling, network and endpoint monitoring and SIEM-based incident handling, alongside offensive and AI-security paths.
Offers high-quality, university-grade interactive modules. Its defensive certification is the HTB Certified Defensive Security Analyst (CDSA), and the catalogue includes cloud-security modules alongside the offensive paths.
A deliberately insecure web application for security training. It is open source and covers the OWASP Top 10 plus newer challenge sets, including AI/LLM prompt injection and system-prompt extraction.
A free OpenSSF course, delivered through the Linux Foundation, on building AI/ML-driven software securely. It covers balancing AI-assisted coding with security and the risks of LLM workflows such as prompt injection and data leakage.
A high-impact entry-level program that teaches Python, Linux, and SQL. In 2026, it remains the standard 'bridge' for career changers entering the security workforce.
The global foundational certification. Security+ V7 (SY0-701) is the current exam; V8 is expected around 17 November 2026, with expanded coverage of AI-related risks, security operations and modern environments.
The industry's most respected podcast and newsletter. It provides high-level analysis of geopolitics, zero-day markets, and major corporate breaches.
Brian Krebs continues to be the primary source for in-depth investigative reporting on cybercrime syndicates and 'behind-the-scenes' looks at data breaches.
A podcast that turns security incidents into compelling narratives. Excellent for 'low-friction' awareness training to help non-technical staff understand hacker mindsets.
CISA's free learning management system, offering self-paced cybersecurity and infrastructure-security courses. Access is available to federal, state, local, tribal and territorial government staff and contractors, veterans and military personnel, and U.S. residents.