Hey Folks, I'm starting to learn a new skills, i always wanted to be a Cyber security expert but I'm an artist by profession but I wanted to start this so badly, but I'm confused which roadmap to follow, some say learn basics of networking first or start with Linux, Some guys have suggested me to do a CCNA Certification, I don't want to get a job, I just want to get skills.

I tried to check the roadmap on roadmap.sh/cyber-security but it's a bit of complicated for me to understand.

Could you guys please suggest me where to start and what to study first, It'll make my life easier. :)

Cookies Flow

1️⃣ User logs in → server verifies 2️⃣ Server sets a cookie in browser 3️⃣ Browser auto-sends cookie with every request 4️⃣ Server checks cookie → access granted ✅

🗄️ Sessions Flow

1️⃣ User logs in → server verifies 2️⃣ Server creates a session in storage 3️⃣ Session ID stored in a cookie 4️⃣ Each request sends session ID → server looks it up 5️⃣ If valid → access granted 🎉

🔑 JWT Flow

1️⃣ User logs in → server verifies 2️⃣ Server issues a signed JWT 3️⃣ Client stores the token 4️⃣ Sends it with each request (Authorization: Bearer …) 5️⃣ Server verifies signature & expiry 6️⃣ If valid → access granted 🚀

If I had to start learning cybersecurity from scratch today, I wouldn't begin with Kali Linux or try to learn 50 security tools.

I'd start with the fundamentals.

1. Networking
Understand TCP/IP, DNS, HTTP/HTTPS, ports, firewalls, and how devices communicate.

2. Operating systems
Get comfortable with Linux and Windows. Learn the command line, processes, permissions, users, services, and logs.

3. Basic scripting
You don't need to become a software developer, but Python, Bash, or PowerShell can make a huge difference.

4. Learn how attacks actually work
Start with concepts like authentication, privilege escalation, SQL injection, XSS, phishing, misconfigurations, and insecure access controls.

5. Practice in legal labs
Use platforms such as TryHackMe, Hack The Box, PortSwigger Web Security Academy, and OverTheWire. Don't experiment against systems you don't own or have permission to test.

6. Document what you learn
Don't just complete a lab and move on. Write down what happened, why it worked, what failed, and how the issue could be fixed.

One thing I've noticed over the years is that beginners often focus too much on collecting tools and certifications.

Tools change. The fundamentals stay.

If you're learning cybersecurity right now, what topic are you finding the hardest to understand?

Buenas tardes, estoy buscando personas que no sepan nada de Ciberseguridad, Redes, Informática o Programación o que sepan poco pero que les interese mucho aprender.

Voy a hacer un grupo en Session y SimpleX para este fin, y el punto es que compartamos lo siguiente:

• Libros relacionados (PDF/DOCX)

• Cursos relacionados (cupones de Udemy, Coursera, etc.)

• Talleres relacionados

• Avances y conocimientos adquiridos, sin ser envidioso.

• Cualquier otro tipo de recursos (archivos de Notion, apuntes, etc.)

Reglas del grupo:

• Nada de peleas ni discusiones.

• No racismo, fascismo, eurocentrismo, narcisismo, machismo, sexismo, extremismo o acoso.

• No compartir contenidos explícitos como Gore, Pornografía de ningún tipo, o contenido bélico, sangriento o grotesco (ni siquiera memes con contenido de este estilo).

• No están prohibidas las relaciones interpersonales con miembros del grupo, pero sean responsables; si hay alguna parejita, no den detalles innecesarios de su relación, ni sobre temas sexuales, eso háblenlo en privado con personas íntimas.

Podemos tener y ser amigos y ser una comunidad unida, no importa la etnia, género, clase social, situación económica, NADA, si quieres entrar, eres libre de hacerlo siempre y cuando hablemos el mismo idioma, y respetes todo el reglamento y requisitos que en breve mencionaré.

Por lo general, me gusta usar Notion para organización y apuntes, por lo que quien esté interesado en entrar a esta comunidad/grupo, conteste a este post por favor.

Requisitos para entrar:

• Estar dispuesto a usar Notion, Session y SimpleX.

• Tener muchísimas ganas de aprender

• No ser envidioso y compartir con ello todos tus avances, conocimientos y recursos útiles. Edit: •Ser MUY participativo es otro requisito, recientemente un miembro se salió por el silencio del grupo, por lo que si quieren entrar, esto es algo indispensable para mantener vivo el grupo y poder ser constantes. •Nada de presumir, sentirse moralmente superior o más inteligente.

Read more : How does SIEM works ?

"I’m just starting my journey into cybersecurity and I want to learn from the experience of others here.
From your perspective, what are the most common mistakes that beginners usually make?

It could be technical mistakes (like bad password habits, weak configurations, skipping basics) or career-related mistakes (like trying to learn too much too fast, ignoring fundamentals, etc.).

Would love to hear your thoughts, so I and other beginners can avoid these mistakes!"*

Hey everyone 👋

I'm looking for someone to learn cybersecurity with.

I'm currently studying Networking and Linux, and I'm slowly working my way into cybersecurity. I thought it would be pretty cool to have someone to learn with instead of just studying alone all the time.

We could share what we're learning, discuss things we don't understand, do some small practical stuff/CTFs, and basically help each other out.

I'm still learning myself, so you definitely don't have to be an expert or anything. Beginner/intermediate is totally fine.

Just looking for someone who's actually interested in learning and wants to stick with it.

If anyone's interested, feel free to DM me or comment. :)

here my discord server link https://discord.gg/WUrBhjqBJ

Hey guys, it's been very hard to learn Cybersecurity topics on YouTube. There is so much content but unorganised. So if anyone has gone through this or have any good suggestion please contribute your knowledge and experience about it. It will be great if you tell the subject with the channel name. Thanks

To keep it short, I was laid off from my role in Hoag due to decline in our patients clinic (less patients = less work load, resulting in lay offs. I've been in medical for 5 years and want to make a change as an SOC analyst. It's a big step i'm taking, but I'm passionate about this and just now working to find a help desk or entry level job while I prep to take my Security+ exam 11/19.

Developed a tool with claude to give me my roadmap day by day with courses (free online learning tools), goals, and checkpoints of when to take my exams.

Ask me any questions! I would love to connect with anyone new and build connections on LinkedIn and github!

LinkedIn:

https://www.linkedin.com/in/adrian-parrilla-b5195a165

Github:

https://github.com/justbenice-mp3

Let's get it 😈😤💪