Catalog

Mobile devices have become indispensable in our daily lives—but their portability and constant connectivity make them prime targets for cyber threats. In this course, Mobile Device Cyber Safety, you’ll develop essential skills for securing smartphones and tablets against a range of modern risks. Through realistic scenarios and hands-on guidance, you’ll explore vulnerabilities such as malicious apps, phishing via text and messaging platforms, unsecured networks, and device theft. You’ll also learn how to apply mobile security best practices, including strong authentication, app vetting, system updates, and mobile device management (MDM) tools. By the end of this training, you’ll be equipped to confidently protect your mobile devices—strengthening one of the most frequently targeted entry points in today’s digital landscape.

Smartphones and tablets are powerful tools for work and personal life—but they’re also prime targets for cybercriminals. Lost devices, malicious apps, weak passwords, and unsafe Wi-Fi can all expose sensitive data. This course explains the most common risks to mobile security and the simple steps you can take to keep your devices, and the information on them, safe. You’ll learn how attackers exploit mobile vulnerabilities, why mobile devices are often the “weak link” in security, and how to apply best practices for both personal and workplace protection. With clear guidance and real-world scenarios, this course helps you make your mobile devices an asset instead of a liability.

Welcome to "Multi-Factor Authentication (MFA): Your Cybersecurity Superpower." In this course, you will learn how to implement MFA techniques to enhance security measures and protect sensitive data within your workplace systems. You'll configure and utilize MFA settings to identify and respond to potential security threats, ensuring robust protection for employee accounts. By integrating MFA tools into existing cybersecurity practices, you will effectively mitigate risks associated with cyber attacks on organizational resources.

As cyberattacks grow more sophisticated, a password alone is no longer enough. In this course, Multifactor Authentication, you’ll gain a clear understanding of how MFA strengthens account security by requiring multiple layers of verification. You’ll explore the different types of authentication factors, learn how threat actors bypass weak systems, and discover how to implement MFA across both personal and workplace accounts. Through case studies and practical application, you'll build the skills to evaluate, enable, and advocate for MFA solutions that align with your organization’s cybersecurity goals. By the end, you'll understand how MFA plays a critical role in reducing risk and preventing unauthorized access.

As cyberattacks grow more sophisticated, a password alone is no longer enough. In this course, Multifactor Authentication, you’ll gain a clear understanding of how MFA strengthens account security by requiring multiple layers of verification. You’ll explore the different types of authentication factors, learn how threat actors bypass weak systems, and discover how to implement MFA across both personal and workplace accounts. Through case studies and practical application, you'll build the skills to evaluate, enable, and advocate for MFA solutions that align with your organization’s cybersecurity goals. By the end, you'll understand how MFA plays a critical role in reducing risk and preventing unauthorized access.

This course delivers a clear and practical introduction to the General Data Protection Regulation (GDPR), focusing on the core obligations organizations must meet to ensure compliance. Learners will explore key principles such as lawfulness, transparency, data minimization, and accountability. The course also covers data subject rights, lawful bases for processing, breach notification requirements, and the roles of controllers and processors. Designed for professionals across industries, this course empowers teams to apply GDPR principles confidently and responsibly within their daily operations.

In the "NERC CIP-002" course, you will gain the skills to evaluate and categorize business assets according to NERC CIP-002 requirements, ensuring compliance and maintaining operational integrity in utility environments. By the end of this course, you will demonstrate your ability to implement risk assessment techniques and develop strategies to mitigate vulnerabilities within electric utility systems. You will learn to explain the scope and objectives of NERC CIP-002, interpret its terminology, and master the process of identifying and categorizing critical assets, all vital for upholding security measures and regulatory obligations.

In this NERC CIP-003 course, you will delve into the intricacies of implementing security management controls specifically designed for your utility environment. By the end, you will be equipped to apply the NERC CIP-003 standard, ensuring compliance and operational efficiency while safeguarding the integrity of the bulk electric system. You will gain advanced analytical skills to make informed cybersecurity vulnerability management decisions and demonstrate proficiency in integrating these guidelines into your existing frameworks.

Embark on your journey to mastering the NERC CIP-004 compliance measures, equipping you with the skills to effectively implement training and personnel risk assessments within your organization. This course will empower you to align your security awareness and training programs with NERC CIP-004 requirements, using hands-on strategies tailored to address the unique challenges of the utility sector. By the end of this course, you will be adept at integrating personnel risk assessment protocols into your existing organizational procedures, significantly enhancing your security posture. You will understand the significance of various NERC CIP-004 measures and be able to describe the essential components of compliance to meet stringent security standards.

In this course, you will delve into the NERC CIP-005 compliance standards, focusing on how they enhance the cybersecurity framework of utility operations by safeguarding electronic security perimeters. You'll gain a comprehensive understanding of the key components and purpose of NERC CIP-005 and its significance within the broader NERC standards. By the end of the course, you will be able to integrate these guidelines into your existing incident response protocols, improving your ability to identify and mitigate potential security threats effectively. Additionally, you will acquire advanced procedural knowledge that empowers you to implement secure electronic access designs, ensuring robust protection against cybersecurity risks.

In this course, you will dive into the essentials of NERC CIP-006, empowering yourself to safeguard critical utility infrastructure effectively. By engaging with the materials, you will learn how to apply the standard's requirements to develop robust physical security strategies and maintain environmental controls. You will also enhance your capability to use NERC CIP-006 guidelines for performing thorough self-audits and prioritize areas for security assessments crucial for compliance and protection of critical cyber assets.

In this course, you'll dive deep into the NERC CIP-007 standard, mastering the art of implementing advanced security management controls to safeguard critical infrastructure within the utility industry. You will gain a comprehensive understanding of advanced vulnerability assessments, learning how to swiftly identify and mitigate cybersecurity risks to protect your systems effectively. By the end of the course, you'll be equipped with the knowledge and skills to adeptly manage and respond to cybersecurity incidents, ensuring the integrity and security of your critical facilities.

In this course, you will gain the critical skills needed to implement NERC CIP-008 incident response processes within your organization. You will explore key components and objectives of the NERC CIP-008 standard, learning how these elements ensure effective incident response strategies in the utility sectors. By the end of the course, you will be equipped to create comprehensive action plans for potential security breaches and effectively document and communicate incident reports in compliance with NERC CIP-008 guidelines. You will also discover how NERC CIP-008 requirements align with broader cybersecurity frameworks, ensuring your organization remains resilient against potential threats.

In this course, you will embark on a detailed journey to master the NERC CIP-009 requirements essential for safeguarding critical cyber assets within the utility infrastructure. By the end of our sessions, you will accurately implement network backup and recovery procedures, skillfully executing incident response and disaster recovery plans to minimize downtime and ensure continuity of operations. Additionally, you'll gain the ability to efficiently update and modify existing recovery plans, comprehending the significance and structure of NERC CIP-009 standards in the process.

In this course, you will delve into the NERC CIP-010 standards, focusing on their application within utility environments to elevate cybersecurity measures. You will gain the expertise to implement risk-based methodologies that ensure both operational resilience and compliance. By exploring the core principles and requirements of NERC CIP-010, you will be equipped to interpret and apply advanced configuration change management processes. These skills will enable you to effectively mitigate vulnerabilities and reduce unauthorized access risks, as well as translate security assessments into enforceable actions aligned with your utility’s risk management strategies.

In this comprehensive course on NERC CIP-011, you will learn how to implement essential data protection controls within your organization's existing infrastructure. By focusing on confidentiality and integrity, you will be able to effectively safeguard critical cyber asset information. You will gain a thorough understanding of the key elements and objectives of NERC CIP-011, ensuring that you can integrate security management controls into your overall cybersecurity strategy. Additionally, you will be able to execute and document regular reviews of the information protection program, maintaining robust protection over sensitive utility data.

In this course, NERC CIP-012, you will delve into the essential security measures necessary for safeguarding Control Center communications. By the end, you'll be adept at applying these principles to develop and implement solid security strategies, aligning with regulatory standards and minimizing operational risks. You will explore key elements of NERC CIP-012, gaining insights into the rationale behind specific security measures, and learn to describe, monitor, and address compliance challenges effectively. Through practical scenarios, you'll build the competence to formulate and execute robust response protocols, integrating advanced encryption and authentication technologies.

This training provides employees with essential knowledge about the HIPAA Security Rule, focusing on protecting electronic protected health information (ePHI). Participants will learn how to identify and prevent security threats, follow proper data handling procedures, and understand their responsibilities in maintaining HIPAA compliance.

Dive into the world of cybersecurity with our comprehensive course on the NIST Cybersecurity Framework (CSF). You will explore the essential components of the framework and how they integrate to form a robust approach to managing cyber risks. By the end, you'll master the art of applying these principles to enhance your organization's security policies and processes. Equipped with real-world scenarios, you'll be prepared to implement best practices for effective data protection and strategic response in your daily operations. Strengthen your IT systems and bolster your organization's security posture with advanced strategies from the NIST Cybersecurity Framework.

The U.S. National Institute of Standards and Technology (NIST) Special Publication 800-53 is one of the most comprehensive catalogs of security and privacy controls available. It provides a structured approach for federal agencies—and increasingly private organizations—to protect systems, data, and privacy against evolving threats. This course introduces the key principles of NIST SP 800-53 in clear, practical terms. You’ll learn what the publication covers, how controls are organized, and why they matter for risk management and compliance. With real-world context, the course helps demystify this extensive framework and highlights its role in building secure and resilient systems.

Researchers have identified an active, large-scale supply chain attack involving a destructive malware variant spreading through the npm ecosystem. Our internal monitoring system has uncovered multiple infected packages containing what appears to be an evolved version of the "Shai-Hulud" malware. Early analysis shows worm-like propagation behavior that automatically infects additional packages maintained by impacted developers. Most critically, we've discovered the malware contains a "dead man's switch" mechanism that threatens to destroy user data if its propagation and exfiltration channels are severed.

Flip phones grew popular, Windows XP debuted on personal computers, Apple introduced the iPod, peer-to-peer file sharing via torrents was taking off, and MSN Messenger dominated online chat. That was the tech scene in 2001, the same year when Sir Dystic of Cult of the Dead Cow published SMBRelay, a proof-of-concept that brought NTLM relay attacks out of theory and into practice, demonstrating a powerful new class of authentication relay exploits. Ever since that distant 2001, the weaknesses of the NTLM authentication protocol have been clearly exposed. In the years that followed, new vulnerabilities and increasingly sophisticated attack methods continued to shape the security landscape. Microsoft took up the challenge, introducing mitigations and gradually developing NTLM’s successor, Kerberos. Yet more than two decades later, NTLM remains embedded in modern operating systems, lingering across enterprise networks, legacy applications, and internal infrastructures that still rely on its outdated mechanisms for authentication. Although Microsoft has announced its intention to retire NTLM, the protocol remains present, leaving an open door for attackers who keep exploiting both long-standing and newly discovered flaws.

In this course, "Navigating GLBA Requirements: A Practical Guide for Finance Experts," you will develop the essential skills to understand and apply the core requirements of the Gramm–Leach–Bliley Act (GLBA) in your daily operations. By the end, you will be equipped to craft effective privacy policies that align with GLBA standards, enhancing customer trust and safeguarding information. Additionally, you'll gain proficiency in utilizing risk assessment tools and techniques to evaluate and mitigate potential threats to financial data security.

Welcome to the Google Drive Training Course, your guide to accessing and navigating files with ease in a collaborative digital workspace.

In this course, "Navigating Compliance: The USA PATRIOT Act," you will dive deep into the provisions of the Act and learn how to apply them to real-world banking and finance scenarios. By the end, you'll be able to interpret and implement key components of the USA PATRIOT Act to enhance due diligence and manage risks in financial transactions. You'll also evaluate and improve existing Anti-Money Laundering (AML) and Know Your Customer (KYC) policies, ensuring compliance and identifying potential risks. Explore how the Act impacts national security and transforms compliance requirements in your industry.

In the course Navigating Social Engineering Attacks: Strategies for Digital Security, you will explore the intricacies of social engineering and learn to safeguard your organization's digital assets. By the end, you'll be adept at recognizing patterns of social engineering attacks and applying effective security measures to mitigate risks in workplace scenarios. You'll gain the ability to identify and explain the key concepts of social engineering, delving into the psychological and technical tactics used to influence cyber behavior. Additionally, you'll be able to distinguish between various techniques like phishing, pretexting, and baiting, using real-world examples to highlight their differences in delivery and execution.

In "Navigating the Cybersecurity Landscape: A Beginner’s Guide," you will embark on a journey to master the essential cybersecurity protocols necessary to protect sensitive data and organizational systems. Throughout this course, you’ll learn to identify and mitigate potential threats, both internal and external, while gaining a comprehensive understanding of how these threats impact personal data security. We will also discuss the critical role compliance with standard regulations plays in cybersecurity practices, equipping you with the knowledge to effectively safeguard organizational frameworks and align with industry standards.

NetSupport Manager ,the legitimate software , allows full remote access, file transfer, screen viewing, command execution, and more. When cybercriminals deploy it: - They get full remote control of the victim’s machine - EDR may not immediately suspect it - The binary is signed by NetSupport Ltd - The tool blends into enterprise environments In other words, attackers don’t need to develop custom backdoors. They simply modify NetSupport’s configuration and drop it silently via loaders.

New York law requires employers to provide all employees with training on how to recognize and prevent sexual harassment in the workplace. In this course, New York Anti-Harassment Training, you’ll learn how to identify inappropriate conduct, understand your rights and responsibilities under New York’s employment laws, and take appropriate action to address harassment. Through practical scenarios and interactive guidance, you’ll explore the legal definitions of harassment, employer obligations, complaint procedures, and protections against retaliation. You’ll also learn how to foster a culture of respect and accountability. By the end of this training, you’ll be equipped to help create a safe, inclusive, and compliant workplace for everyone.

New York law requires employers to provide all employees with training on how to recognize and prevent sexual harassment in the workplace. In this course, New York Anti-Harassment Training, you’ll learn how to identify inappropriate conduct, understand your rights and responsibilities under New York’s employment laws, and take appropriate action to address harassment. Through practical scenarios and interactive guidance, you’ll explore the legal definitions of harassment, employer obligations, complaint procedures, and protections against retaliation. You’ll also learn how to foster a culture of respect and accountability. By the end of this training, you’ll be equipped to help create a safe, inclusive, and compliant workplace for everyone.

NightSpire ransomware refers to a security threat which first steals sensitive data from an organization and then encrypts that data, holding it hostage until the victim pays a hefty ransom. And if their demands are not met, victims face the horrifying prospect of having their private data leaked publicly, placing immense pressure on them to comply. This approach has solidified NightSpire’s reputation as a major player in the dark web, and as a group to be feared. These attacks are considered more serious as they combine stealth, persistence, and psychological intimidation. In a very short span, NightSpire ransomware has made its mark because of its capability to enter the most sophisticated networks and systems.

A novel backdoor targeting Microsoft Outlook, identified as "NotDoor" and also known as Cordyceps or GONEPOSTAL, has been attributed to the persistent threat group APT28. This group is linked to Russian intelligence services and has a history of compromising companies across various sectors in NATO member countries. The malware functions as a VBA macro designed to monitor incoming emails for specific trigger words, enabling attackers to exfiltrate data, upload files, and execute commands on compromised systems.