Explore cybersecurity, one topic at a time.
Discover cybersecurity from fundamentals and networking to ethical hacking, security operations, advanced specializations and research. Choose a topic to explore its course outline and lessons as they become available.
Cybersecurity topics and courses
Search the directory or filter by category to find a subject.
Introduction to Cybersecurity
Understand what cybersecurity is and why it matters in the digital age.
Types of Cyber Threats
Explore the main categories of attacks that target systems and data.
Information Security Fundamentals
Learn the core concepts that protect information assets.
CIA Triad: Confidentiality, Integrity and Availability
Master the three foundational goals of every security programme.
Cybersecurity Principles and Best Practices
Apply proven principles such as least privilege and defence in depth.
Threats, Vulnerabilities and Risks
Distinguish threats, vulnerabilities and risks and how they interact.
Risk Assessment and Risk Management
Identify, analyse and treat security risks in a structured way.
Authentication and Authorization
Verify who users are and what they are allowed to do.
Password Security and Password Managers
Create strong credentials and store them safely with password managers.
Multi-Factor Authentication (MFA)
Add extra layers of verification beyond passwords alone.
Social Engineering Attacks
Recognise and defend against attacks that target human behaviour.
Phishing and Email Security
Detect and prevent deceptive emails that steal credentials or deliver malware.
Malware, Viruses, Worms and Trojans
Understand how different classes of malicious software operate.
Ransomware and Spyware
Study malware that encrypts data for ransom or secretly monitors users.
Cybersecurity Laws, Ethics and Professional Conduct
Operate within legal and ethical boundaries as a security professional.
Computer Networking Fundamentals
Build a solid understanding of how networks connect and communicate.
TCP/IP and OSI Models
Map network communication to the layered models used in practice.
IP Addressing and Subnetting
Design and divide IP networks for efficient and secure communication.
DNS, DHCP and Network Services
Understand critical network services that name and configure hosts.
HTTP, HTTPS and TLS
Secure web traffic with encryption and the TLS protocol.
Firewalls and Network Filtering
Control traffic flow with firewalls and filtering rules.
Virtual Private Networks (VPNs)
Create secure tunnels for remote and site-to-site connectivity.
Network Monitoring and Traffic Analysis
Observe and analyse network traffic to detect anomalies and attacks.
Linux Fundamentals for Security
Use Linux confidently for system administration and security work.
Windows Security Fundamentals
Secure Windows systems and domains with built-in tools and policies.
User Accounts, Permissions and Access Control
Manage identities and enforce the principle of least privilege.
System Hardening and Secure Configuration
Reduce attack surface by applying secure baselines and configurations.
Endpoint Security and Antivirus
Protect desktops, laptops and servers from malware and intrusion.
Wireless Network Security
Secure Wi-Fi networks against eavesdropping and unauthorised access.
Network Segmentation and Zero Trust
Limit lateral movement with segmentation and zero-trust principles.
Python for Cybersecurity
Use Python to automate security tasks and build custom tools.
Bash and PowerShell Scripting
Automate administrative and security tasks on Linux and Windows.
Programming Fundamentals for Security
Build the coding skills needed to understand and exploit software.
Secure Coding Principles
Write software that resists common attack techniques.
Common Software Vulnerabilities
Recognise and prevent flaws that attackers routinely exploit.
Cryptography Fundamentals
Understand the mathematical and practical basis of modern cryptography.
Symmetric and Asymmetric Encryption
Compare shared-key and public-key approaches to protecting data.
Hashing and Digital Signatures
Ensure integrity and authenticity with cryptographic hashes and signatures.
Public Key Infrastructure (PKI) and Certificates
Manage digital certificates and the trust infrastructure behind them.
Key Management and Cryptographic Protocols
Safely generate, store, rotate and use cryptographic keys.
Introduction to Ethical Hacking
Learn the mindset and scope of authorised security testing.
Penetration Testing Methodology
Follow structured phases from planning through reporting.
Rules of Engagement and Legal Authorization
Define scope and obtain proper legal permission before testing.
Information Gathering and Reconnaissance
Collect publicly available and technical information about targets.
Attack Surface Mapping
Identify all entry points that an attacker could potentially use.
Vulnerability Assessment
Discover and prioritise weaknesses in systems and applications.
Vulnerability Scanning and Verification
Use scanners and manual checks to confirm real vulnerabilities.
Web Application Security Fundamentals
Understand how modern web applications can be attacked and defended.
OWASP Top 10 Web Application Risks
Study the most critical web application security risks worldwide.
SQL Injection: Concepts and Prevention
Exploit and, more importantly, prevent database injection attacks.
Cross-Site Scripting (XSS)
Inject and execute malicious scripts in the context of other users.
Cross-Site Request Forgery (CSRF)
Force authenticated users to perform unwanted actions.
Authentication and Session Security
Protect login flows and session tokens from common attacks.
Security Testing in Controlled Labs
Practise offensive techniques safely in isolated lab environments.
Penetration Testing Reports and Remediation
Document findings clearly and guide effective remediation.
Security Operations Center (SOC) Fundamentals
Understand the structure and mission of a modern SOC.
Security Information and Event Management (SIEM)
Collect, correlate and analyse security events at scale.
Log Analysis and Monitoring
Extract meaningful signals from system and application logs.
Threat Detection and Alert Triage
Identify real threats among noisy alerts and prioritise response.
Incident Response Lifecycle
Prepare for, detect, contain and recover from security incidents.
Digital Forensics Fundamentals
Collect and analyse digital evidence in a forensically sound way.
Evidence Collection and Chain of Custody
Preserve the integrity and legal admissibility of digital evidence.
Memory and Disk Forensics
Extract artefacts from volatile memory and persistent storage.
Malware Analysis Fundamentals
Dissect malicious software to understand its behaviour and impact.
Threat Intelligence
Use external and internal intelligence to anticipate and counter threats.
Indicators of Compromise (IoCs)
Identify and act on technical artefacts that signal a compromise.
Intrusion Detection and Prevention Systems
Deploy systems that detect and block malicious network activity.
Security Automation and Orchestration (SOAR)
Automate repetitive response tasks with playbooks and orchestration.
Threat Hunting
Proactively search for hidden adversaries that evade automated detection.
Disaster Recovery and Business Continuity
Plan for recovery so the organisation can survive major disruptions.
Cloud Security Fundamentals
Secure workloads and data in public and hybrid cloud environments.
AWS, Azure and Google Cloud Security
Apply security controls and best practices on major cloud platforms.
Identity and Access Management (IAM)
Control who can access what resources across systems and clouds.
Container and Kubernetes Security
Protect containerised applications and their orchestration platforms.
DevSecOps and Secure CI/CD Pipelines
Embed security into the software delivery pipeline from the start.
Application Security and Secure Software Development
Build security into every stage of the software development lifecycle.
API Security
Protect application programming interfaces from abuse and attack.
Mobile Application Security
Secure apps running on smartphones and tablets.
Database Security
Protect sensitive data stored in relational and NoSQL databases.
Internet of Things (IoT) Security
Address the unique risks of connected devices and sensors.
Industrial Control Systems (ICS) and OT Security
Protect operational technology that runs industrial processes.
Wireless and Network Protocol Security
Secure a range of wireless and specialised network protocols.
Advanced Persistent Threats (APTs)
Study sophisticated, long-term intrusion campaigns and defences.
Supply Chain Security
Manage risks introduced by third-party software and hardware.
Privacy Engineering and Data Protection
Build systems that protect personal data by design and by default.
Artificial Intelligence in Cybersecurity
Apply AI techniques to detection, response and defence automation.
Machine Learning for Threat Detection
Build models that identify malicious behaviour from data.
AI Security and Adversarial Machine Learning
Protect AI systems from attacks that manipulate their behaviour.
Generative AI Security and Prompt Injection Risks
Secure large language models and defend against prompt-based attacks.
Blockchain and Smart Contract Security
Audit and secure decentralised applications and smart contracts.
Digital Identity and Passwordless Authentication
Move beyond passwords with modern identity and authentication methods.
Quantum Computing and Post-Quantum Cryptography
Prepare for the impact of quantum computers on current cryptography.
Cybersecurity Governance, Risk and Compliance (GRC)
Align security programmes with organisational risk and regulatory needs.
Security Auditing and Compliance Frameworks
Assess controls against recognised standards and regulatory requirements.
ISO 27001 and Information Security Management
Implement an information security management system to the ISO standard.
NIST Cybersecurity Framework
Organise security activities around the NIST CSF core functions.
Cybersecurity Certifications and Career Paths
Plan a career path and choose certifications that match your goals.
Security Research and Responsible Disclosure
Find vulnerabilities and report them ethically and safely.
Cybersecurity Project and Practical Lab
Apply skills in a structured hands-on project or lab environment.
Cybersecurity Research Project and Dissertation
Plan, execute and present a substantial independent research project.
Choose a category. Build your cybersecurity skills step by step.
This directory organises cybersecurity from fundamentals and networking through ethical hacking, security operations, advanced specializations and research. Each topic can have its own course overview, chapter pages, examples, and practice questions. Some course pages still need to be created.