Get the latest Cyber Security insights
Explore expert perspectives, trends, and practical guidance to help teams stay ahead in cyber security.
AI Incident Response: Where Should Human Approval Sit?
In our recent study, eight of the 43 organisations studied in depth had explicit human approval gates, while 15 discussed autonomy or agentic behaviour. None described allowing AI to independently make high-consequence containment or eradication decisions.
In conversation with Karol Wróblewski of Fresenius Group on mentorship, and why the way into cyber is sometimes through the window
Having built his own way up through IT and into cybersecurity, Karol is a firm believer in paving the way for others who have the skills and the capability to follow.
AI in the SOC: Which Use Cases Are in Production?
In our most recent report, The Hard Part Is Still Human, we examined how security teams are using AI in practice.
Security training has been failing financial services
Right now, financial services is one of the most attacked industries on earth. It also happens to be one of our fastest growing client segments at TryHackMe. We see that it's been woefully underserved.
Building Windows incident response capability, one responder at a time
Responders need to have built the capability before they need it. We’ve built the Windows Incident Response & Forensics path to strengthening team defences one responder at a time.
Security teams are vetting candidates with hands-on simulations
Across TryHackMe's client base, enterprises are preventing candidates from "gaming" the system by gamifying back, using simulators and capture the flag experiences to verify real skill. Not only are they battling fraud, they're improving the efficiency of their hiring in the process.
From Technical Curiosity to Cybersecurity Leadership: Hira Rafiq on leadership, hiring for potential and paving the way for female leaders
As part of our ongoing series spotlighting cyber security leaders within our community, we sat down with Hira Rafiq, who leads a governance, risk and compliance (GRC) and digital forensics team at Trillium Information Security Systems, a leading cyber security firm in Pakistan.
Introducing Live Breach: Hands-on incident response for security teams
Live Breach gives security teams a realistic, hands-on environment to work through a live cyber attack together, from the first signs of compromise through investigation, containment, and eradication.
What building an automated SOC can teach us about AI, and about ourselves
Alongside THM co-founder Ashu, Senior Content Engineer Tinus Green built a five-agent security operations centre, ran it through TryHackMe tabletop exercises, and logged every decision. We spoke about where they performed well, where they didn’t, and why telling the difference isn’t always simple.
Women in Cyber: Nestlé's Nastassja Portero on Building Confidence, Speaking Business, and Finding Your Path in Offensive Security
Her unlikely path into the field, how she builds learning paths for the next generation, and the confidence it took to go from questioning whether she belonged to contributing to global offensive security projects at one of the world's largest companies.
Defending AWS: the most common cloud misconfigurations and how to train a team to fix them
Defending AWS means fixing the most common cloud misconfigurations across identity, network, compute, and data. A guide to training a team to do it hands-on.
A guide to the NIST NICE Framework: aligning cyber security training for government teams
What the NIST NICE Framework is, how its Work Roles and Task, Knowledge and Skill statements fit together, and how government teams align training to it.
DevSecOps Training for Software and Engineering Teams: Closing the Skills Gap
The DevSecOps skills gap doesn't stay closed. Why it reopens, where it shows up across the pipeline, and how to close it with repeatable, hands-on practice.
What is a cybersecurity tabletop exercise? A practical definition and format guide
A cybersecurity tabletop exercise is a discussion-based simulation that tests a team's incident response plan. What one is, who takes part, and how to run one.
Women in Cyber: Rachael Held on inclusion, imposter syndrome, and making the business case for security
we sat down with Rachael Held, Cyber Security Director at Carpenter Technology, to talk about her unconventional path into the field, and the advice she'd give to anyone starting out or switching careers into cyber.
Looking to upskill your security team?
Discover how TryHackMe for Business helps organizations build hands-on cyber capabilities through training, labs, and expert-led resources.