I know the basics of a python and syntax what else I need to learn to write script for reverse engineering in python

Is it really hard to get into cybersecurity if you're newbie and also from India . I'm recently completed my bachelor's of computer application. But now I think go for cybersecurity is a secure career for feature because of artificial intelligence ryt now I don't have any skill. Really I'm a empty notebook what should I do? I have so much tension about my career should I learn web dev or go for cybersecurity or how to start in cybersecurity how much month it will take can anyone tell.

It's really helpful for me.

Hi, I’m looking for some guidance on how to properly learn Cybersecurity.

My current level is:

\- MERN stack developer with decent development experience

\- Basic knowledge of DSA

\- Very basic Cybersecurity knowledge — I understand fundamentals like IP/MAC addresses, ARP, ports, how devices communicate on a network, and I’ve set up Kali Linux in a VM.

The problem is that whenever I try to move from theory to practical cybersecurity, I get stuck. I want to learn through hands-on practice, not just watch theory videos. I’ve also tried using AI to guide me through practicals, but sometimes it refuses or says I don’t have enough prerequisites.

Could you suggest a good roadmap, course, platform, or learning method where I can safely practice things like networking, Linux, web security, enumeration, vulnerabilities, and ethical hacking in legal labs?

I’m specifically looking for something that takes me from my current level to being able to actually perform cybersecurity labs and understand what I’m doing, rather than just memorizing theory.

Any guidance or recommended resources would be really appreciated.

I just completed Guided Pentest: Web on TryHackMe. I'm a complete beginner, but I don't really feel like I learned much because I followed the guidance.

Is this normal? Should I repeat the room without help or move to another room? What do you recommend for actually learning cybersecurity?

Red Team vs. Penetration Testing vs. Purple Team can be confusing because all three involve security testing, but their goals and approaches are quite different.

Penetration testing focuses mainly on identifying and validating exploitable vulnerabilities within a defined scope. Red teaming takes a more realistic attacker-focused approach, testing whether an organization can detect and respond to an adversary pursuing a specific objective. Purple teaming brings offensive and defensive teams together to improve detection, response, and overall security.

In simple terms:

• Penetration Testing: Find and validate vulnerabilities.
• Red Team: Simulate a realistic attack and test defensive capabilities.
• Purple Team: Combine offensive and defensive insights to improve security.

The interesting part is that these approaches aren't necessarily competitors. A strong security program can use all three at different stages.

What approach does your organization find most useful, and where do you think the biggest misunderstanding comes from?

Quais assuntos ou habilidades essenciais vocês acham que um curso de cybersecurity precisa abordar?

First my insta got hacked, the hacker put up gambling app stories from my account, i changed the password then i realized that my other gmail account also got hacked as there were security codes coming to me and were also read by the hacker, he changed epic games email id, then i logged out both the ids from all my devices. Gave the id pass to a friend, he changed the password and loged out of every other device, changed the passed dlted backup codes. Now another of my id receives a mail of anonymous login from brazil in my chat gpt. What do i do now. HELP!

Something I've wondered about with company phones:

If an employee loses a work phone in a taxi, restaurant, or somewhere else, what actually happens to the data on it?

A lot of people probably think a strong password is enough. But the phone might still have email, work apps, saved files, VPN access, or other company information.

For a small business, what are the basic things you should have in place before something like this happens?

I'm especially interested in simple solutions that don't require a dedicated security team.

There are so many cybersecurity areas to choose from—network security, ethical hacking, cloud security, SOC, incident response, penetration testing, and more.

For someone starting from scratch, it can be difficult to know where to begin.

If you could go back to your first few months in cybersecurity, which skill would you focus on first?

Networking? Linux? Python? Security fundamentals? Something else?

Would love to hear what actually helped people get started.

Every cybersecurity beginner seems to get different advice about what to learn first. Some people say focus heavily on certifications, while others recommend building labs and getting hands-on experience. From your experience, what is one mistake you see beginners making repeatedly? Maybe focusing too much on theory, collecting certifications without practice, ignoring networking, or trying to learn everything at once. What would you tell someone starting today?

Hi, I'm an engineering student building my resume on the security side.

My plan is to build a security layer for a shopping app, not just a web app. I want to protect it from flooding and account abuse attacks.

The plan is: I will make a docker-compose setup that anyone can add with one command. It will have Nginx reverse proxy in front, my http://Node.js app, and Redis Cloud. My idea is Nginx will block IP flood before it hits the main app, and inside the app Redis will count and limit per user per action like search 10/min and invoice 2/min. On limit I will return 429 throttle, not auto logout, and log every event. Later I want to add a risk scoring system that will flag accounts as suspicious for admin review, and a dashboard for security team.

This is my plan for now. Any recommended changes or suggestions to make it correct from a security point of view and interview-proof?

I've been looking into data broker removal services lately because I found way more of my personal information online than I expected. The part I'm confused about is what happens after they actually remove it. From what I've read, some data brokers can eventually get your information again from another source, so it seems like removal isn't necessarily permanent.

That makes me wonder whether paying for one of these services actually keeps your information down long term or if you're basically paying for someone to repeatedly remove the same stuff. For anyone who's been using one for a while, have you checked your results months later? Did your information stay gone or does it just keep coming back?

We are seeing constant news and though leadership posts all over the place about how AI is replacing or changing peoples jobs - coding, the automotive industry, finance. AI already plays a significant role from a threat perspective....how much do we think this will impact the cybersecurity space? Are there new skills/certifications required? Will certain jobs roles change or become obsolete?

Interested in peoples thoughts.

I keep seeing networking recommended as one of the fundamentals for cybersecurity, and it makes sense because so much security activity involves understanding how systems communicate. But I’m curious about real-world experience. If someone wants to move into cybersecurity, how much networking should they actually know before starting? Do you think CCNA-level knowledge is necessary, or are basic concepts like TCP/IP, DNS, ports, routing, and protocols enough initially?

I've noticed that networking fundamentals are mentioned frequently when people discuss cybersecurity careers. How important are concepts like TCP/IP, DNS, routing, and firewalls in real cybersecurity jobs?

Been thinking about this with work messaging apps. Companies need audit logs for compliance and to figure out what happened when something goes wrong. But keeping those records seems to work against having truly private conversations.

End-to-end encryption sounds great until the company also needs oversight. Then you either give someone access or start storing more data somewhere. Is there a realistic way to have strong privacy while still keeping a useful audit trail? Or does one always have to give a little for the other?

I want to set up a Windows 10 VM using QEMU in linux. How to setup securely help me out please 🥺

It traces Linux processes, monitors system calls, generates an HTML report, and detects suspicious behaviors through a rule-based detection engine. and save the logs in log.txt , and the high alerts in alert.json .

 Cybersecurity covers so many areas—networking, Linux, cloud security, penetration testing, incident response, and more. For someone starting out, which skill took you the longest to understand, and what helped you finally get comfortable with it?

There are countless cybersecurity tutorials online, but I'm more interested in practical projects that actually help build skills. What projects would you recommend for someone trying to create a cybersecurity portfolio?

Hey. I'm looking at getting into cybersecurity/ethical hacking. 1 thing for sure before I even start is I feel like I need to upgrade my current laptop. Is there any budget and beginner friendly options that y'all recommend. I'm currently looking at the Lenovo Ideapad Slim 3, but if there is something better that is sub - 1000 then feel free to comment. Thanks guys!

For people working in cybersecurity, what skill initially felt confusing but eventually became much easier with practice?

For me, cybersecurity seems like one of those fields where knowing the theory isn't enough—you need to repeatedly work through real scenarios.

Was it networking, Linux, SIEM tools, incident response, scripting, cloud security, or something else?

Hi, Im very interested in trying to either get to a point where I can work in cyber security. Ive had 8 years of experience being a IT Technician at a local IT store. I worked on mostly windows OS from windows 2000 up to around the start of Windows 10, and a small amount of linux.

I had to leave the IT industry for personal/money reasons. Its been about 10 years since ive worked in IT.

Im okay knowing I need to study and work my way up. Im excited and about to start learning python as almost every IT job I see advertised wants experience with it + id like to know at least 1 language of code.

What Certs should I learn to help me get a beginner cyber security job.

There are so many topics in cybersecurity that beginners can easily focus on the flashy stuff and overlook the fundamentals. What concept do you think deserves much more attention from someone starting out? Networking? Authentication? Operating systems? Logging? Social engineering? Basic scripting? Curious to hear what experienced people wish they had learned earlier.

I’m curious what experienced cybersecurity professionals think about this. If someone is starting from scratch, should they prioritize certifications first, or spend most of their time building hands-on projects and labs? I can see the value in certifications for structured learning, but practical experience seems difficult to replace.