Browse the Full Catalog

Cybrary’s comprehensive, framework-aligned catalog has been reorganized to provide you with an intentional, guided learning experience. Advance your career, prep for certifications, and build your skills whenever, wherever.

Start Learning for Free
Cybrary for Business

The content and tools you need to build real-world skills

Rapidly develop your skills via an integrated and engaging learning
experience on the Cybrary platform.

Bite-sized Video Training

Manageable instruction from industry experts

Hands-On Learning

Put your skills to the test in virtual labs, challenges, and simulated environments

Practice Exams

Prepare for industry certifications with insider tips and practice exams

Earn Industry Badges

Complete coursework to earn industry-recognized badges via Credly

New Release

AI Curriculum

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
AI Technical Foundations
Collection
Free
10
H:
6
M
12
 CEUS

AI Technical Foundations

The AI Technical Foundations Collection provides a comprehensive set of courses aimed at transitioning artificial intelligence capabilities from abstract research into reliable enterprise solutions.

Learn More & Enroll
AI for Cybersecurity
Collection
Free
1
H:
30
M
2
 CEUS

AI for Cybersecurity

Build on your AI technical foundations and learn how to use AI securely to enhance your cybersecurity activities.

Learn More & Enroll
Collection
Free
2
H:
30
M
2
 CEUS

AI for Cybersecurity Roles

These courses compliment our Career and Skill paths, and show how AI intersects with different cybersecurity roles.

Learn More & Enroll
Skill Path
Free
4
H:
45
M
4
 CEUS

AI Fundamentals

Learn the basics of Artificial Intelligence! This skill path is designed to provide you with a general understanding of Artificial Intelligence, and how to deploy and secure it within the enterprise. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Course
Free
0
H:
15
M
 CEUS

AI Scams

In this brief course, you will learn the basics of AI scams. AI scams are cyberattacks that use artificial intelligence to trick people. They create emails, videos, voice messages, or websites that look, sound, and read like the real thing, making them far more convincing and harder to detect than traditional scams.

Learn More & Enroll
Course
Free
0
H:
15
M
 CEUS

Deepfake Awareness

In this brief course, you will learn the basics of deepfakes as part of your required Security Awareness Training. Deepfakes are synthetic media, usually videos, images, or audio, created using artificial intelligence to convincingly mimic real people. They can make someone appear to say or do something they never actually did.

Learn More & Enroll

Certification Prep

Filter By
Clear
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Advanced
Certification Prep
Free
33
H:
28
M
29
 CEUS

CISSP

The CISSP certification prep path will provide you with a comprehensive overview of the cybersecurity principles and security best practices needed to pass the CISSP certification exam.

Learn More & Enroll
Beginner
Certification Prep
Free
39
H:
2
M
33
 CEUS

CompTIA Security+

The CompTIA Security+ certification prep path will provide you with a comprehensive overview of the cybersecurity principles and security best practices needed to pass the Security+ certification exam.

Learn More & Enroll
Beginner
Certification Prep
Free
40
H:
38
M
39
 CEUS

CompTIA A+

The CompTIA A+ certification prep path will provide you with a comprehensive overview of the cybersecurity principles and security best practices needed to pass the A+ certification exams.

Learn More & Enroll
Beginner
Certification Prep
Free
24
H:
25
M
22
 CEUS

CompTIA Network+

The CompTIA Network+ certification prep path will provide you with a comprehensive overview of the cybersecurity principles and security best practices needed to pass the Network+ certification exam.

Learn More & Enroll
Beginner
Certification Prep
Free
16
H:
38
M
15
 CEUS

CompTIA Tech+ (FC0-U71)

CompTIA Tech+ is a beginner-level certification and is perfect for you if you are considering a new career or career change to the IT industry. This certification prep path is designed to provide you with a comprehensive overview of the concepts and skills you will need to pass the certification exam.

‍

Learn More & Enroll
Intermediate
Certification Prep
Free
43
H:
5
M
38
 CEUS

CompTIA CySA+

The CompTIA CySA+ certification prep path will provide you with a comprehensive overview of the cybersecurity principles and security best practices you’ll need to pass the CySA+ certification exam.

Learn More & Enroll

Skill Paths

Filter By
Clear
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Skill Path
Free
4
H:
46
M
1
 CEUS

Governance

Governance is the system of rules, practices, and processes used to direct and control a company. This skill path is designed to provide you with a general understanding of how to align business objectives with ethical practices for how a company operates. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Skill Path
Free
6
H:
39
M
 CEUS

Compliance

Compliance is the act of adhering to all relevant laws, regulations, industry standards (external), and internal policies and controls (corporate). This skill path is designed to provide you with a general understanding of how to ensure an organization operates within legal and ethical boundaries to avoid fines, penalties, and reputational damage. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Skill Path
Free
5
H:
15
M
3
 CEUS

Cybersecurity Leadership

Becoming an effective Cybersecurity Leader requires you to consider traditional Leadership competencies through a security-centric lens. This skill path is designed to provide you with a general understanding of cybersecurity leadership. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Skill Path
Free
5
H:
9
M
3
 CEUS

Collaborative Leadership

Collaborative Leadership is the skillset required to work effectively with others. This skill path is designed to provide you with a general understanding of the collaborative skills required to be a successful leader. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Skill Path
Free
5
H:
16
M
4
 CEUS

Soft Skills

Soft Skills are the traits required for positive and constructive interactions with other people. This skill path is designed to provide you with a general understanding of the soft skills required to be a successful leader. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Coming Soon
Skill Path
Free
H:
M
 CEUS

Incident Response

Incident Response is the rapid response function that addresses high-impact security events in real time. This skill path is designed to provide you with a general understanding of Incident Response as both a skill set and work role. Upon completing the skill path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
New Release

Career Paths

Career Path
Free
45
H:
40
M
32
 CEUS

IT & Cybersecurity Foundations

Any career in cybersecurity begins with learning a diverse range of IT and Cybersecurity concepts. This career path is designed to provide you with the foundational knowledge and skills required to enter the cybersecurity workforce.

Learn More & Enroll
Career Path
Free
31
H:
35
M
20
 CEUS

SOC Analyst

SOC Analysts are the front line of defensive security operations and one of the most in-demand roles in cybersecurity. This career path will prepare you to become an entry-level SOC Analyst.

Learn More & Enroll
Career Path
Free
43
H:
0
M
22
 CEUS

Penetration Tester

Penetration Testers are professional ethical hackers, responsible for assessing the security posture of applications and networks on behalf of their employers. This career path will prepare you for success and teach you how to become an entry-level Penetration Tester.

Learn More & Enroll
Career Path
Free
43
H:
40
M
27
 CEUS

Security Engineer

Security Engineers are security-minded architects and builders. This career path will provide you with the foundational knowledge and key skills needed to succeed as an entry-level Security Engineer.

Learn More & Enroll
Career Path
Free
20
H:
33
M
14
 CEUS

Leadership and Management

Effective Leadership and Management is critical to any security-related function. This career path is designed to provide you with the foundational knowledge and key skills required to succeed as an effective leader within any security domain. Upon completing the career path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
Career Path
Free
0
H:
0
M
 CEUS

GRC Analyst

Every successful cybersecurity program requires judicious risk management and informed oversight. This career path is designed to provide you with the foundational knowledge and key skills required to succeed as a GRC Analyst or in any role that involves managing governance, risk, and compliance. Upon completing the career path, you will earn a Credly digital badge that will demonstrate to employers that you’re ready for the job.

Learn More & Enroll
New Release

Security Awareness Training

Course
FREE
1
H:
35
M
2
 CEUS

Secure AI Research

Learn to align AI research with secure principles to ensure due care and faster approvals. You will prioritize adversarial risks using MITRE and OWASP LLM Top 10, design data protection controls for privacy and integrity, build an evaluation process, select safe integration patterns, and communicate risk to review boards with audit-ready artifacts.

Learn More & Enroll
Course
H:
15
M
2
 CEUS

AI Scams

In this brief course, you will learn the basics of AI scams. AI scams are cyberattacks that use artificial intelligence to trick people. They create emails, videos, voice messages, or websites that look, sound, and read like the real thing, making them far more convincing and harder to detect than traditional scams.

Learn More & Enroll
Course
H:
15
M
 CEUS

Impersonation Scams

In this brief course, you will learn the basics of impersonation scams as part of your required Security Awareness Training. Impersonation scams happen when cybercriminals pretend to be someone you know and trust. They use urgency, realistic details, and familiar names to pressure you into acting fast, often before you have time to think or verify.

Learn More & Enroll
Course
H:
15
M
 CEUS

Supply Chain Risk

In this brief course, you will learn the basics of supply chain risk as part of your required Security Awareness Training. Supply chain risk is the cybersecurity threat that comes from the businesses you depend on, like suppliers, vendors, and service providers, rather than direct attacks on your own systems.

Learn More & Enroll
Course
H:
15
M
 CEUS

Deepfake Awareness

In this brief course, you will learn the basics of deepfakes as part of your required Security Awareness Training. Deepfakes are synthetic media, usually videos, images, or audio, created using artificial intelligence to convincingly mimic real people. They can make someone appear to say or do something they never actually did.

Learn More & Enroll
Course
H:
15
M
 CEUS

Threat Actors

In cybersecurity, a threat actor is anyone or anything that intentionally causes harm using digital methods. This includes hackers, insiders, bots, or AI scripts that steal data, disrupt systems, or exploit vulnerabilities, usually for money, politics, revenge, or attention.

Learn More & Enroll

Collections

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Collection
Free
24
H:
32
M
21
 CEUS

System Administrator

System Administrators are responsible for managing, maintaining, and securing an organization’s computer systems, networks, and servers. This collection is the perfect starting point for professionals with little background in IT or cybersecurity.

Learn More & Enroll
Collection
Free
25
H:
6
M
19
 CEUS

Network Engineer

Network Engineers are responsible for designing, implementing, managing, and optimizing an organization's network infrastructure. This collection covers network administration, protection, and architecture.

Learn More & Enroll
Collection
Free
35
H:
53
M
40
 CEUS

Incident Handler

Incident Handlers are on the front line of cyberdefense. This collection focuses on the incident response process — from building an incident response kit and developing an incident response team, to identifying, containing, and recovering from incidents.

Learn More & Enroll
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Ethical Hacking: Mobile Platform, IoT, and OT Hacking
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Ethical Hacking: Wireless Network Hacking
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Ethical Hacking: Web Application Hacking
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Ethical Hacking: Network and Perimeter Hacking
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Ethical Hacking: Reconnaissance Techniques
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Ethical Hacking: Introduction to Ethical Hacking
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Designing Microsoft Azure Infrastructure Solutions (AZ-305)
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Provision an Azure Container Registry
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Implement Role-Based Access Control Lab
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Getting Started with Azure Networking and High Availability
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Implement Azure Policy Lab
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure Azure Virtual Networking
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Implement, Manage, and Monitor Azure Storage
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Getting Started with Azure Storage, Virtual Machines, and Monitoring
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Automate the Deployment of an Azure Virtual Machine by Using an Azure Resource Manager Template
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Use Managed Identities
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Store Sensitive Data in Azure Key Vault
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure Application Insights
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Secure Azure SQL Server
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Secure a Storage Account
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Set an Azure Alert for a Web App
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Autoscale a Web App
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Deploy a Web Job
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure Continuous Deployment using GIT and Deployment Slots
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Enable VM Backup using Recovery Services Vault
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Use Azure Storage Explorer
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Enable Dynamic Data Masking using Azure SQL Database
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure Geo-Replication for your Database
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Provision an Azure Storage Queue
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Provision an Azure Storage Table
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Provision a Function App
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
AZ-305: Case Studies
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
AZ-305: Design Infrastructure Solutions
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
AZ-305: Design Business Continuity Solutions
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
AZ-305: Design Data Storage Solutions
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Use PKI to Secure a Network Environment
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
AZ-305: Design Identity, Governance, and Monitoring Solutions
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Deploy Ubuntu Linux Virtual Machines in the Microsoft Azure
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
AZ-305 Designing Microsoft Azure Infrastructure Solutions
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Identify Non-Secure Network Traffic
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure a Network Security Group in a Virtual Network
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Secure Network Access
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure Network Connectivity for Linux on Azure
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure IP Routing with Linux on Azure
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure a Virtual Network Service Endpoint
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Configure a Virtual Network Service Endpoint
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Learn Cisco Networking Fundamentals
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
TRUE InteGRITy
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Data Security
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Application Security
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Infrastructure and Operations Security
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Security Engineering Fundamentals
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
TransMission Impossible
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Dynamic Analysis Paralysis
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Get Me an Analysis, Stat(ic)
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
pfSense and Sensibility
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Die Hardening
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Data Loss Prevention
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Data Classification
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Cybrary's Next Top Threat Modeler
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Database Security
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Data Security Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Dynamic Code Analysis
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Application Security Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Static Code Analysis
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
System Hardening
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Virtualization Security Administration
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Zero Trust Architecture
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Deploying and Configuring Firewalls
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Infrastructure and Operations Security Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Secure Coding Best Practices
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
DevSecOps
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Security Engineering and Cyber Risk
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Scripting and Programming Fundamentals
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Cybersecurity Fundamentals
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Operating System Fundamentals
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Et tu Python?
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
The PowerShell and the Glory
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Cryptography Keeper
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Earth, Wind, and Firewall
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Out of Access Control
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Troubleshooting in Paradise
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Jumping the Wireshark
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Public Service Announcement
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Python Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Python Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
PowerShell Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Patching Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Vulnerability Scanner Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Firewall Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
IDS Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Group Policy Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Active Directory Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Network Troubleshooting Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Data Backup and Recovery Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
VPN Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Garret Donaldson
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Wireshark Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Antivirus Basics
mitre-attack
cev-series
tag-threat
tag-challenge
tag-owasp
Access Control Basics

Stay Ahead

Filter By
Clear
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
OWASP Top 10
Course
Free
2
H:
25
M
3
 CEUS

OWASP Top 10 - A01:2021 - Broken Access Control

The OWASP Top 10 features the most critical web application security vulnerabilities. This part covers A01: Broken Access Control. You will learn how to identify, exploit, and offer remediation advice for this vulnerability in a secure lab environment. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll
OWASP Top 10
Course
Free
2
H:
18
M
3
 CEUS

OWASP Top 10 - A02:2021 - Cryptographic Failures

The OWASP Top 10 features the most critical web application security vulnerabilities. This part covers A02: Cryptographic Failures. You'll learn to identify, exploit, and offer remediation advice for this vulnerability in a secure lab environment. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll
OWASP Top 10
Course
Free
2
H:
54
M
3
 CEUS

OWASP Top 10 - A03:2021 - Injection

The OWASP Top 10 features the most critical web application security vulnerabilities. This part covers A03: Injection. You will learn how to identify, exploit, and offer remediation advice for this vulnerability in a secure lab environment. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll
OWASP Top 10
Course
Free
1
H:
23
M
3
 CEUS

OWASP Top 10 - A04:2017 - XML External Entities

The OWASP Top 10 features the most critical web application security vulnerabilities. This part covers A4: XML External Entities. You will learn how to identify, exploit, and offer remediation advice for this vulnerability in a secure lab environment. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll
OWASP Top 10
Course
Free
1
H:
33
M
2
 CEUS

OWASP Top 10 - A04:2021 - Insecure Design

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A04: Insecure Design, you'll take advice from a trusted offensive security professional on how to use threat modeling and other techniques to protect your organization against critical design flaws that adversaries could exploit.
Learn More & Enroll
OWASP Top 10
Course
Free
2
H:
45
M
3
 CEUS

OWASP Top 10 - A05:2021 - Security Misconfiguration

The OWASP Top 10 features the most critical web application security vulnerabilities. In this part, A05: Security Misconfiguration, you'll identify, exploit, and offer remediation advice for this vulnerability. We also cover XML External Entities. Build your offensive security and penetration testing skills with this one-of-a-kind course!
Learn More & Enroll
MITRE ATT&CK
Course
Free
1
H:
10
M
1
 CEUS

Server Software Component: Web Shell

Bad actors can gain persistence on your network by abusing software development features that allow legitimate developers to extend server applications. In this way, they can install malicious code for later use. Learn to detect and thwart this activity and protect your network.
Learn More & Enroll
MITRE ATT&CK
Course
0
H:
50
M
1
 CEUS

Scheduled Task

Some organizations do not configure their operating systems and account management to properly protect the use of task scheduling functionality. As a result, adversaries can abuse this capability to execute malicious code on a victim’s system. Get hands-on practice detecting this technique so you can protect your organization.
Learn More & Enroll
MITRE ATT&CK
Course
0
H:
50
M
1
 CEUS

Registry Run Keys

Many organizations do not monitor for additions to the Windows Registry that could be used to trigger autostart execution on system boot or logon. This allows adversaries to launch programs that run at higher privileges and paves the way for more damaging activity. Learn how to detect and mitigate this activity to secure your network.
Learn More & Enroll
Course
FREE
H:
45
M
 CEUS

Configure Security Recommendations for Virtual Machines

This "Configure Security Recommendations for Virtual Machines" IT Pro Challenges virtual lab teaches learners how to configure security recommendations for a virtual machine by enabling security recommendations and Azure Disk Encryption. Skills learned in this lab are crucial for the job roles of System Administrators and Azure Administrators.

Learn More & Enroll
Course
FREE
H:
45
M
 CEUS

Configure Azure Disk Encryption

This IT Pro Challenge virtual lab teaches how to encrypt a virtual machine’s disk using Azure’s Cloud Shell commands. Hands-on experience — creating and deploying a virtual machine and a data disk, and using a command-line interface — advances System Administrators, Cybersecurity Specialists, and Microsoft Azure Cloud Engineers career paths.

Learn More & Enroll
Course
FREE
H:
45
M
 CEUS

Create and Configure Application Security Groups

The Azure platform provides cloud-based tools for businesses to deploy their web services. This IT Pro Challenge virtual lab will give you an Azure application security groups' overview. Application security groups allow system administrators to control access to Azure virtual machines. In this lab, you will deploy an application security group.

Learn More & Enroll
Course
FREE
H:
45
M
 CEUS

Configure Virtual Network Connectivity using Peering

In this lab, you assume the role of an Azure® administrator. First, you will create an Azure virtual network by using the Azure portal. Next, you will create an Azure virtual network by using Azure Cloud Shell. Finally, you will configure virtual network peering connections for secure bidirectional communication.

Learn More & Enroll
Course
FREE
1
H:
M
 CEUS

Implement API Management to Publish APIs Securely

In this IT Pro Challenge provided by Learn on Demand Systems, you will implement an Azure API Management Instance to then publish and secure your API using a product and subscription.

Learn More & Enroll
Course
FREE
1
H:
33
M
2
 CEUS

CCSP: Domain 6 - Legal, Risk and Compliance

In this CCSP: Domain 6 - Legal, Risk and Compliance course you will learn about legal frameworks and forensics, privacy in the cloud, and enterprise risk management.

Learn More & Enroll
Course
FREE
2
H:
22
M
2
 CEUS

CCSP: Domain 5 - Cloud Security Operations

In this CCSP: Domain 5 - Cloud Security Operations course you will learn about secure network configurations and controls, forensics, evidence collection and preservation, and logging, incident management, and vulnerability assessments.

Learn More & Enroll
Course
FREE
1
H:
51
M
2
 CEUS

CCSP: Domain 4 - Cloud Application Security

In this CCSP: Domain 4 - Cloud Application Security course you will learn about cloud development basics, common pitfalls, and vulnerabilities, cloud specific risks, and cryptography, sandboxing, virtualization, and orchestration.

Learn More & Enroll
Course
FREE
1
H:
38
M
2
 CEUS

CCSP: Domain 3 - Cloud Platform and Infrastructure Security

In this CCSP: Domain 3 - Cloud Platform and Infrastructure Security course you will learn about how to design a secure data center, about identification, authentication, and authorization in the cloud, as well as business continuity and disaster recovery planning and testing.

Learn More & Enroll
Cybrary Challenges
Course
Free
0
H:
30
M
1
 CEUS

Jumping the Wireshark

In this hands-on challenge, you will have the opportunity to put your Wireshark skills to the test.

‍

Learn More & Enroll
Cybrary Challenges
Course
1
H:
25
M
1
 CEUS

CVE Series: “Leaky Vessels” Container Breakout (CVE-2024-21626)

CVE-2024-21626 is a severe vulnerability affecting all versions of runc up to 1.1.11, a critical component utilized by Docker and other containerization technologies like Kubernetes. This vulnerability enables an attacker to escape from a container to the underlying host operating system. Put on your red team hat to exploit this vulnerability.

Learn More & Enroll
Cybrary Challenges
Course
1
H:
30
M
1
 CEUS

CVE Series: VFS Escape in CrushFTP (CVE-2024-4040)

CVE-2024-4040 is a critical vulnerability in CrushFTP, a Java-based robust file server. Rated with a CVSS score of 10, this flaw permits remote, unauthorized attackers to circumvent authentication mechanisms, thereby gaining remote code execution (or RCE). In this course you’ll explore, exploit, and remediate this CVE.

Learn More & Enroll
Cybrary Challenges
Course
1
H:
25
M
1
 CEUS

CVE Series: aiohttp Directory Traversal Vulnerability (CVE-2024-23334)

CVE-2024-23334 is a high severity vulnerability found in the aiohttp Python library, a popular asynchronous HTTP client/server framework. By the end of this course you will be able to execute a directory traversal attack using aiohttp's vulnerable configuration and then perform remediation steps to fix the vulnerability.

Learn More & Enroll
Cybrary Challenges
Course
1
H:
0
M
1
 CEUS

CVE Series: Apache HugeGraph Server Gremlin Query Language RCE (CVE-2024-27348)

CVE-2024-27348 is a critical vulnerability in Apache HugeGraph, a graph database designed for large-scale data management. With a CVSS score of 9.8, attackers can exploit this flaw by sending crafted payloads to execute arbitrary commands, potentially leading to a full system compromise.

Learn More & Enroll
Cybrary Challenges
Course
1
H:
0
M
1
 CEUS

Challenge: Agent Diwali

In this month's Cybrary challenge, you will be exploring the inner workings of automobiles by analyzing a CAN Bus dump file. The Controller Area Network (CAN bus) is the black box for vehicles, recording every action taken.

Learn More & Enroll
Cybrary Challenges
Course
1
H:
0
M
1
 CEUS

Challenge: Holiday Speed Run

In this month's Cybrary challenge, you will be exploring the inner workings of automobiles by analyzing a CAN Bus dump file. The Controller Area Network (CAN bus) is the black box for vehicles, recording every action taken.

Learn More & Enroll
Cybrary Challenges
Course
Free
0
H:
30
M
1
 CEUS

Jumping the Wireshark

In this hands-on challenge, you will have the opportunity to put your Wireshark skills to the test.

‍

Learn More & Enroll
Cybrary Challenges
Course
Free
1
H:
M
 CEUS

Burping Sauce

In this hands-on challenge, you will practice using Burp Suite to exploit a vulnerable web application.

Learn More & Enroll
CVE Series
Course
0
H:
30
M
1
 CEUS

Beaucoup Phish

In this hands-on challenge, you will practice researching log events related to a reported spearphishing attack.

Learn More & Enroll
CVE Series
Course
0
H:
30
M
1
 CEUS

Keen Observation

In this hands-on challenge, you will practice researching network observables.

Learn More & Enroll
CVE Series
Course
0
H:
30
M
1
 CEUS

Certificate of Authenticity

In this hands-on challenge, you will practice analyzing log events related to Windows authentication.

Learn More & Enroll
CVE Series
Course
0
H:
30
M
1
 CEUS

Process Profiles in Courage

In this hands-on challenge, you practice profiling a suspicious process on a Windows system.

Learn More & Enroll
CVE Series
Course
0
H:
30
M
1
 CEUS

Red Alert

In this hands-on challenge, you will practice using SIEM search expressions to locate suspicious activity related to XRDP traffic.

Learn More & Enroll
CVE Series
Course
1
H:
5
M
1
 CEUS

CVE Series: Jenkins Arbitrary File Leak Vulnerability (CVE-2024-23897)

CVE-2024-23897 is a critical security flaw affecting Jenkins, a Java-based open-source automation server widely used for application building, testing, and deployment. It allows unauthorized access to files through the Jenkins integrated command line interface (CLI), potentially leading to remote code execution (RCE).

Learn More & Enroll
CVE Series
Course
1
H:
25
M
1
 CEUS

CVE Series: Authentication Bypass Leading to Remote Code Execution (RCE) in JetBrains TeamCity (CVE-2024-27198)

CVE-2024-27198 is a critical vulnerability in JetBrains TeamCity, a Java-based open-source automation server used for application building. This flaw allows remote, unauthorized attackers to circumvent authentication, thereby gaining admin control over the server. All versions of TeamCity On-Premises up to 2023.11.3 are affected.

Learn More & Enroll
CVE Series
Course
0
H:
30
M
1
 CEUS

Search and Destroy

In this hands-on challenge, you will practice using SIEM search expressions to locate suspicious activity related to XRDP traffic.

Learn More & Enroll
CVE Series
Course
1
H:
35
M
1
 CEUS

CVE Series: Authentication Bypass in Apache Superset (CVE-2023-27524)

CVE-2023-27524 is a critical vulnerability in Apache Superset, affecting versions up to 2.0.1. It enables attackers to bypass authentication by exploiting weak or default SECRET_KEY values. Attackers can forge session cookies to gain admin access, leading to potential remote code execution and unauthorized data access.

‍

Learn More & Enroll
Threat Actor Campaigns
Course
4
H:
15
M
4
 CEUS

Royal Ransomware Group

Royal is a spin-off group of Conti, which first emerged in January of 2022. The group consists of veterans of the ransomware industry and brings more advanced capabilities and TTPs against their victims. Begin this campaign to learn how to detect and protect against this newer APT group!

Learn More & Enroll
Threat Actor Campaigns
Course
4
H:
20
M
4
 CEUS

Magic Hound

Magic Hound (APT35) is an Iranian state-sponsored threat group that primarily targets organizations across various industries and geographic regions through cyber espionage. Launch this campaign to start detecting the sophisticated techniques leveraged by this threat group.

Learn More & Enroll
Threat Actor Campaigns
Course
5
H:
30
M
5
 CEUS

Raspberry Robin

Raspberry Robin is a malware family that continues to be manipulated by several different threat groups for their purposes. These threat actors (Clop, LockBit, and Evil Corp) specialize in establishing persistence on a compromised host and creating remote connections to use later. Once established, these C2 connections can be used for multiple purposes, including data exfiltration, espionage, and even further exploitation.

Learn More & Enroll
Threat Actor Campaigns
Course
9
H:
3
M
10
 CEUS

Double Trouble with Double Dragon

Advanced Persistent Threats (APTs) conduct state-sponsored cyberattacks that can radically disrupt global business operations. Launch this campaign to start detecting sophisticated techniques leveraged by APT41, known as "Double Dragon" because they cause double trouble with both espionage and financially-motivated attacks!
Learn More & Enroll
Threat Actor Campaigns
Course
5
H:
58
M
5
 CEUS

Weak Link in the Supply Chain

Threat actors known as Advanced Persistent Threats (APTs) conduct highly sophisticated attacks sponsored by nation-states. They maintain a committment to stealth and often use custom malware. This campaign emulates a supply chain attack by APT29 that is similar to the SolarWinds compromise and it has the end goal of stealing sensitive information.
Learn More & Enroll
Threat Actor Campaigns
Course
5
H:
45
M
7
 CEUS

Ransomware for Financial Gain

Threat actors continue to leverage ransomware to extort victim organizations. What was once a simple scheme to encrypt target data has expanded to include data disclosure and targeting a victim’s clients or suppliers. Understanding the techniques threat actors use in these attacks is vital to having an effective detection and mitigation strategy.

Learn More & Enroll

Teams

Cybrary Select

No items found.

Cybrary Live

Designed to complement Cybrary’s on-demand certification prep content, Cybrary Live allows learners to interact directly with expert instructors in a boot camp-style virtual classroom environment. Contact sales@cybrary.it to inquire about Cybrary Live for your team.

Request a Demo

Our Instructors

Industry seasoned. Cybrary trained.
Our instructors are current cybersecurity professionals trained by Cybrary to deliver engaging, consistent, quality content.

See all
Instructor
Instructor

Georgia Weidman

Founder and CTO at Shevirah and Bulb Security
Learn More
Instructor
Instructor

Max Alexander

VP, Cybersecurity Incident Response Planning at JPMorgan
Learn More
Instructor
Instructor

Joe Perry

Senior Technical Instructor at FireEye, Inc
Learn More
Instructor
Instructor

Carter Schoenberg

Executive VP of IPKeys Power Partners
Learn More
See All Instructors

What Our Learners Are Saying

Join 3 million+ users, including 96% of Fortune 1000 companies who use our platform to upskill their teams. See what the buzz is about - start learning for free!

Cybrary is just an amazing platform. Literally thousands of hours of quality content. You can find a course or a lab for just about everything, and they are constantly releasing new material. They also have highly responsive customer service. It's been worth every penny.

Jared

Greatest investment I have made to dateCybrary is solely responsible for my passing the CompTIA A+ exam and is the reason I am going into my Net+ with confidence. I have learned a great deal through virtual labs, practice tests, recorded lessons, and the various other things they offer. The community is great as well. Got a question about the interview process for a tech job? Ask in discord. Just got a cert? Post it in discord and let the reactions and comments flow making you feel great about yourself. It is an all around wonderful experience and I rate it as a totally worthwile expense for starting or furthering your career in the IT industry. Invest in yourself.

Bradly

Training is coolEasy to enroll, instructors are enthusiastic and professionnal, technical stuff is very well explained.

JPM

I've been having concerns on how to start in terms of building my #cybercareer with a sustained path. So I got introduced to Cybrary and I was able to enroll and startup early last week and I have gone through two sessions, getting to know Cybrary and also a view of what cybersecurity is from their perspective. That gave me an overall view of what jobs are found in the space, their general responsibilities, required skills, necessary certifications and their average salary pay... Cybrary has given me a greater reason to pursue my hearts desire at all cost.

Jamal O.
Student

Thanks to Cybrary I'm now a more complete professional! Everyone in [the] cybersecurity area should consider enrollment in any Cybrary courses.

João S.
IT Administrator - CISSP

The interviewer said the certifications and training I had completed on my own time showed that I was a quick learner, and they gave me a job offer.

Justin B.
IT Specialist

Our partnership with Cybrary has given us the opportunity to provide world-class training materials at no cost to our clients, thanks to the funding we’ve received from the government. Cybrary offers a proven method for building a more skilled cybersecurity workforce.

Katie Adams
Senior Director

All of the knowledge, skills, and abilities gained through the program were essential to me impressing the employer during the interview.

Gabby H.
Senior Security Analyst

Cybrary is a one-stop-shop for my cybersecurity learning needs. Courses on vulnerability management, threat intelligence, and SIEM solutions were key for my early roles. As I grow into leadership roles influencing business policy, I’m confident Cybrary will continue developing the knowledge and skills I need to succeed.

No Name
Senior Cybersecurity Consultant and Virtual CISO

After tens of minutes, I proudly have achieved my certificate of continuing education for Intro to Infosec... Doing everything I can to avoid retaking the CISSP test! Thanks Cybrary - 1 CPE at a time!

Alex H.

We’ve had six students this summer, all with different schedules, so we’ve been trying to balance their learning experience with some practical work. It’s not like they’re all sitting in a classroom at the same time, so the ability for them to learn at their own pace without any additional support has probably been the biggest benefit of using Cybrary.

Collin Ricker
Business Development Manager

Just finished the third out of four MITRE ATT&CK Defender courses on Cybrary... If anyone is interested in learning how to do ATT&CK based SOC assessments I would definitely recommend this course. The best part is that it is FREE!

Eric T.
AWS Certified Cloud Practitioner

Excellent new series of courses from Cybrary, each course covers a different CVE, demonstrates vulnerability and its mitigation.

Raul C.
Cybersecurity Specialist

I've successfully completed the career path provided by Cybrary to become a SOC Analyst - Level 2. Eventually, do what you love, and do it well - that's much more meaningful than any metric.

Wissal Ayari
SOC Analyst

Cybrary is helping me proactively build skills and advance my career. Labs put concepts immediately into practice, reinforcing the content (and saving me time not having to spin up my own VM). Career paths lay everything out clearly, so I know what skills to prioritize.

No Name
Enterprise Analyst

I got a job as a cybersecurity analyst at Radware with a salary I've never even dreamed about AND with no prior experience.

Alexei Z.
Cybersecurity Analyst

Thank you to Cybrary for providing this opportunity to complete the Cybrary Orientation Certification program with such sleekness and detail-oriented learning.

Ganesh Y.

So far I have really been enjoying Cybrary's SOC Analyst Training, it has been very informative. I just finished up with the command line section and now I'm on to the more fun stuff (Malware Analysis). I think it's so dope that platforms like this exist. This is a game changer.

Tobias Castleberry
SOC Analyst, Security+ Certified

I decided to check out Cybrary and the courses they had to offer after seeing a few posts from people who had completed their courses. I'm happy to say that their instructors are knowledgeable and clear, and their course catalogues are extensive and offer relevant career path courses.

Nazli S.
AWS Certified Cloud Practitioner

Glad to have discovered Cybrary they are such a great tool to use to help diversify your knowledge through lessons, assessments and practices. All compact[ed] into highly detailed and informative chunks of information. Feeling very content with the results.

Temi B.
Cisco Certified Network Associate

Well, it took a long time, yet I struggled hard to complete the course "Become a SOC Analyst - Level 2" by Cybrary. Cybrary is the best platform that I have ever come across. Tons of virtual labs, great in-depth insights from the experts, and the best career path/learning modules.

Madiraju Pranay Kashyap
Programmar Analyst Trainee

I am currently working in a restaurant and going to school full time. But it is not stopping me from working on gaining more and more skills. I have already spent more than 30 hours on Become a SOC Analyst level 1 [with] Cybrary and still have 67 hours to go.

Abibou F.
SOC Analyst Level 1 Learner