Get the latest Cyber Security insights
Explore expert perspectives, trends, and practical guidance to help teams stay ahead in cyber security.
Introducing Live Breach: Hands-on incident response for security teams
Live Breach gives security teams a realistic, hands-on environment to work through a live cyber attack together, from the first signs of compromise through investigation, containment, and eradication.
What building an automated SOC can teach us about AI, and about ourselves
Alongside THM co-founder Ashu, Senior Content Engineer Tinus Green built a five-agent security operations centre, ran it through TryHackMe tabletop exercises, and logged every decision. We spoke about where they performed well, where they didn’t, and why telling the difference isn’t always simple.
Women in Cyber: Nestlé's Nastassja Portero on Building Confidence, Speaking Business, and Finding Your Path in Offensive Security
Her unlikely path into the field, how she builds learning paths for the next generation, and the confidence it took to go from questioning whether she belonged to contributing to global offensive security projects at one of the world's largest companies.
Defending AWS: the most common cloud misconfigurations and how to train a team to fix them
Defending AWS means fixing the most common cloud misconfigurations across identity, network, compute, and data. A guide to training a team to do it hands-on.
A guide to the NIST NICE Framework: aligning cyber security training for government teams
What the NIST NICE Framework is, how its Work Roles and Task, Knowledge and Skill statements fit together, and how government teams align training to it.
DevSecOps Training for Software and Engineering Teams: Closing the Skills Gap
The DevSecOps skills gap doesn't stay closed. Why it reopens, where it shows up across the pipeline, and how to close it with repeatable, hands-on practice.
What is a cybersecurity tabletop exercise? A practical definition and format guide
A cybersecurity tabletop exercise is a discussion-based simulation that tests a team's incident response plan. What one is, who takes part, and how to run one.
Women in Cyber: Rachael Held on inclusion, imposter syndrome, and making the business case for security
we sat down with Rachael Held, Cyber Security Director at Carpenter Technology, to talk about her unconventional path into the field, and the advice she'd give to anyone starting out or switching careers into cyber.
Cyber tabletop exercises for government and public-sector teams: how to run them flexibly and often
Public-sector organizations are held accountable for how they handle that moment, by regulators, auditors, and the citizens they serve, and the ability to respond is something they have to prove rather than assert. Regular exercising is how that readiness gets built and demonstrated.
Web application security certifications: what they should validate for security teams
Web applications are among the more exposed, internet-facing parts of many organizations' estates, and web testing is one of the more sought-after skills in penetration testing, so proving it well is worth getting right.
Cyber range ROI: how to build the business case for security drilling
A security leader deciding whether to fund regular drilling should consider the risk minimized versus the time invested up front. Return on investment (ROI) is still there, but has to be measured in the currency of time. And time during an incident has a price.
Incident response certifications: which credentials validate a response-ready team?
For a decision maker planning training for a team that can carry an incident from the first alert to the closed ticket, the priority should be credentials that cumulatively build well-rounded capability.
The Cyber Resilience Act (CRA): building hands-on cyber capability across your product teams
For most of the past two decades, a product's security wasn’t explicitly owned by the team building it. The Cyber Resilience Act (CRA) unwinds that arrangement.
Blue Team Simulations for Small Teams: Exercises, Tools & Best Practices
Blue team simulations give small security teams a way to practice detecting, investigating, and responding to attacks without waiting for a real incident.
Incident response training for remote teams: building coordinated readiness across locations
Remote readiness is best treated as something to measure rather than assume. Because a manager cannot watch a distributed analyst work an incident over their shoulder, a scored performance report and a repeatable feedback loop are how escalation, speed, and coordination get measured and proven.
Looking to upskill your security team?
Discover how TryHackMe for Business helps organizations build hands-on cyber capabilities through training, labs, and expert-led resources.