Catalog

In this Workplace Security & Compliance course, you will learn how to seamlessly integrate essential security protocols into your daily operations to ensure regulatory compliance and minimize risks. By the end of the course, you'll be adept at explaining the integral security protocols and their contribution to compliance and risk reduction. Additionally, you'll grasp the key components of the workplace security framework and understand how each piece works together to create a secure work environment. Equipped with this knowledge, you’ll confidently demonstrate the ability to respond effectively to security breaches utilizing best practice procedures.

What you do in the first few minutes after clicking a phishing email can make the difference between a close call and a costly breach. This course walks you step-by-step through the critical actions to take the moment you realize you’ve clicked something suspicious. You’ll learn how to quickly contain the risk, report the incident with the right details, and begin recovery without making things worse. Through realistic scenarios, you’ll see how to respond if you entered your password on a fake site, opened a malicious attachment, or replied to a fraudulent message. We’ll also show you what to expect from IT after you report, how to preserve important evidence, and how to protect your accounts until your device is cleared.

"Your First SOC 2 Conversation," you'll develop the skills to effectively communicate SOC 2 principles with organizational stakeholders. By diving into real-world scenarios, you'll learn to navigate discussions about cybersecurity frameworks with clarity and purpose. This course will empower you to explain and apply SOC 2's core principles, discuss Trust Service Criteria, and prepare for informed conversations about cybersecurity impact and compliance.

Cybersecurity isn’t just for businesses, it’s personal. Every individual has a unique “threat model,” shaped by the information they handle, the devices they use, and the risks they face. This course helps you understand your own digital footprint and identify the threats most relevant to your daily life, whether it’s phishing attempts, identity theft, social engineering, or privacy intrusions. You’ll learn how to think like an attacker, spot potential vulnerabilities, and make smarter choices about what to protect and how. With practical strategies, relatable examples, and easy-to-apply tools, you’ll leave with a clear plan to reduce your risks and stay safe online.

In the course "Zero Trust Architecture: Implementing NIST 800-207," you'll dive into the cutting-edge principles of Zero Trust to transform how network security is approached within enterprises. By applying NIST 800-207 guidelines, you will learn to design secure network segments and configure access control policies that ensure robust user and device authentication. You'll explore the fundamental concepts like micro-segmentation and the principle of least privilege, gaining insights into their influence on traditional network infrastructures. Additionally, you'll understand the role of continuous monitoring and adaptive security measures, empowering you to enforce Zero Trust security effectively.

Trust no one—verify everything. In just 60 seconds, get a clear and simple breakdown of the Zero Trust security model. Learn why this “never trust, always verify” approach is critical for protecting modern workplaces from cyber threats.

Unlock the secrets of Cloud Security by diving into the world of Zero Trust Security models with this course, tailored specifically for cloud applications and infrastructure. You will gain a comprehensive understanding of how Zero Trust principles differ from traditional security approaches and learn to identify and mitigate vulnerabilities in cloud environments effectively. As you progress, you'll explore the architectural frameworks and advanced authentication and authorization techniques that reinforce cloud security, empowering you to safeguard applications and data with confidence. By the end of this course, you'll be equipped to implement robust Zero Trust strategies, ensuring resilience against modern digital threats.

Traditional perimeter defenses aren’t enough to stop today’s attackers. Zero Trust flips the script by treating every user, device, and connection as untrusted until verified. This course explores the principles of Zero Trust security and shows how organizations can apply them to defend against phishing, ransomware, insider risk, and other evolving threats. You’ll discover how Zero Trust shifts the focus from “trust but verify” to “never trust, always verify,” and why that mindset is critical in modern cybersecurity. Through clear examples and practical insights, you’ll learn how identity, access controls, network segmentation, and continuous monitoring come together to reduce risk and strengthen resilience.

In this course, you will explore the transformative world of Zero Trust security and its crucial role in modern data protection. You will gain insights into how Zero Trust principles redefine traditional security models and learn to apply at least three key security measures to safeguard your digital routines. By the end, you'll master the art of integrating these principles into your personal and professional life, enabling you to conduct secure communications and data transfers while ensuring compliance with organizational security policies.

In this course, you will dive into the enigmatic world of zero-day exploits, learning how attackers leverage unknown vulnerabilities to bypass standard security measures. By understanding the unique challenges in detecting and responding to these elusive threats, you will be equipped to critically evaluate and enhance your organization's cybersecurity defenses. You'll gain insights into the lifecycle of zero-day vulnerabilities, from discovery to exploitation, and apply this knowledge to implement proactive measures that safeguard your data. With a focus on real-world case studies, you'll connect theory with practice, understanding the significant impacts such attacks can have on organizational cybersecurity.

Dive into the world of cybersecurity with our course on Zero-Day Vulnerabilities. You'll explore these elusive threats and understand their crucial impact on systems and networks. By the end of the course, you'll be equipped to identify and analyze zero-day vulnerabilities, applying advanced cybersecurity frameworks and diagnostic techniques. You will also gain practical skills in using industry-standard practices to mitigate these vulnerabilities, enhancing your ability to protect systems proactively. Get ready to transform your understanding of zero-day threats and strengthen your cybersecurity strategies.

Getting ready for our switch to Zoom Phone? This quick overview walks you through everything you need to know before the transition, including changes to outbound dialing, how to reach the Helpdesk, new ways to make and receive calls, and more. Whether you're using a desk phone, computer, or mobile device, we've got you covered.

test

Des chercheurs en cybersécurité ont mis au jour une campagne de ransomware sophistiquée. Des acteurs du groupe Agenda déploient des binaires de ransomware Linux directement sur des systèmes Windows, ciblant l'infrastructure de virtualisation VMware et les environnements de sauvegarde. Cette technique d'exécution multiplateforme remet en question les principes de sécurité traditionnels et illustre comment les opérateurs de ransomware s'adaptent pour contourner les systèmes de détection de menaces sur les terminaux, principalement axés sur les menaces natives Windows. La campagne d'attaque exploite une méthode de déploiement inédite combinant des outils de gestion à distance légitimes et des tactiques avancées d'évasion des défenses. Les attaquants utilisent WinSCP pour le transfert sécurisé de fichiers et Splashtop Remote pour exécuter des charges utiles de ransomware Linux sur des machines Windows, créant ainsi un vecteur d'attaque non conventionnel qui contourne les contrôles de sécurité classiques. Le déploiement de binaires Linux via des canaux de gestion à distance complexifie la détection pour les solutions de sécurité non configurées pour surveiller l'exécution multiplateforme. L'accès initial a été obtenu grâce à des techniques d'ingénierie sociale sophistiquées utilisant de fausses pages CAPTCHA hébergées sur l'infrastructure Cloudflare R2.