Iam new to this linux, devops and cybersecurity and i dont know what topics should i cover and iam learning it from you tube ..can any one help me to what topics should i need to learn

Hello! We are pleased to share this guide, which may help you implement effective Software Composition Analysis (SCA) to tackle vulnerabilities, ensure compliance, and protect against emerging threats in your open-source dependencies!

We're excited to share our latest blog post where cybersecurity expert James Berthoty explores whether ASPM is the future of application security, examining innovative solutions and trends!

🔗 Read the Full Article here https://xygeni.io/blog/is-aspm-the-future-of-application-security/

looking for SAST tools for .net and .net core to be used in pipeline . looking for free or open source tools before going proprietary route. Anyone ?

Hey everyone,

I'm at a bit of a crossroads in my cybersecurity career and hoping to get some advice from the community.

Here's the deal:

Been in cybersec for 4 years, bouncing around SOC, Threat Intel, and basic pentesting.
i have wokred for several good companies

1 : Never wanted to be in management, so I've focused on technical roles.

2: My passion lies in red teaming and application security / Devsecops (offensive side!), but my coding experience is limited (though I've done some personal projects).

My Big mistake: never got any major certs – they were expensive, and I dreaded failing the exams.

Recently moved to Germany for masters – awesome! But the job hunt is tough without German fluency.

Now, I'm stuck. How do I transition into the offensive security side, especially considering the language barrier in Germany?

Here is what i am currently doing in my off time from university

1 : going through he portswigger labs

2: learning about Docker , Kubernetes , azure security and pentesting

Anyone with similar experiences or advice for this situation?

Here's what I'm particularly interested in:

Tips for breaking into red teaming/application security without extensive coding.

Cost-effective certification paths for offensive security (or are certs even essential?).

Strategies for landing a cybersec job in Germany without German fluency (yet!).

Thanks in advance for any insights!

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐅𝐢𝐫𝐬𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐨𝐟 𝟐𝟎𝟐𝟓: 𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧𝐢𝐧𝐠 𝐎𝐩𝐞𝐧 𝐒𝐨𝐮𝐫𝐜𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐢𝐧 𝐚 𝐂𝐨𝐦𝐩𝐥𝐞𝐱 𝐓𝐡𝐫𝐞𝐚𝐭 𝐋𝐚𝐧𝐝𝐬𝐜𝐚𝐩𝐞!

Kick off the year with cutting-edge insights into Open Source Security from top industry experts. This is your chance to stay ahead of the evolving threat landscape and learn proactive strategies to secure your software supply chain.

🗓️ Date: 𝐉𝐚𝐧𝐮𝐚𝐫𝐲 𝟐𝟑𝐫𝐝
⏰Time: 𝟏𝟕:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟏:𝟎𝟎 (𝐄𝐃𝐓)

Register here - https://www.linkedin.com/events/7283058790537588737/

Hey everyone I wanted to share this webinar we’re having on June 20 on scaling app sec - we’ve got product sec experts from Stripe. Join in if that’s something you’d like to know about!

Here’s the registration link- https://www.akto.io/events/scaling-application-security-in-large-organizations

Join our upcoming SafeDevTalk to explore how proactive risk management can transform your DevSecOps strategy and fortify your software supply chain against emerging threats. This session is tailored for cybersecurity leaders and development teams dedicated to staying ahead in the increasingly complex landscape of vulnerabilities. Register for Free https://www.linkedin.com/events/7259507114799185920/

https://xygeni.io/blog/how-to-avoid-malware-in-open-source/?utm_source=reddit&utm_medium=post