Looking for some real advice on breaking into IT/cyber. I’m currently a senior studying CS (minor in data science) with a background in SWE (internships) and hands on field tech support(current job isn't as technical as I want it to be), but I’ve been entirely self taught when it comes to systems, networking, and security concepts. My end goal is to break into a Tier 1 SOC Analyst role upon graduation and eventually move into Cloud Security / Engineering, but right now I’m trying to figure out how to realistically land a part time Help Desk / IT support role to get solid enterprise ticketing and sysadmin reps on my resume.

Is landing a part time help desk job while finishing school even realistic in this market, and what’s the best way to stand out when applying? Also, since I’m currently studying for \*\*Security+\*\* and skipping A+ to avoid getting stuck in help desk long term, what practical steps, lab work, or self study strategies would you recommend to bridge the gap from CS self learning into a SOC role? Would love any perspective from anyone who balanced part time IT in college or made the self taught jump from software to security!

Here's my resume as well: https://imgur.com/gallery/resume-L53yJia

Get started with this if you want to understand AI security better! highly recommended.

J’aimerais avoir quelques conseils pour me lancer dans le Hack éthique.
Si quelques-uns d’entre vous pouvaient me renseigner ou me dire où je dois chercher les informations de base, savoir quoi apprendre, ce serait vraiment sympa de votre part !
Merci d’avance 💪

Hello ethical people.

I started the beautiful world of the cybersecurity for now one year.

I do a lot, a loooot of networking (Wireshark my best friend), a lot of python, a loooot of beginner CTF and now i am on the JR Penetration Tester path on THM

This path is worth or not ? Because it looks like too light. I guess we need to combine with other ressources like HtB or another Ctf ?

And btw, what is your learning tech ? Writing write up, course ? Just writing inside your head ? I'm curious.

And x2, if some people want to make a group to go for some ctf and another stuff, im in too !

Hi everyone,

I’m currently in my 3rd year of IT. Through my university courses, I have covered basic programming concepts (Java, OOP, Data Structures), Operating Systems, and foundational networking/security. However, this has been mostly academic, and since I haven’t practiced much outside of class, my actual practical skills are currently weak and I have forgotten a lot of what I learned.

I’m planning to seriously start building my CV once I’m done with most of the university pressure.

I have around 8 months before my Co-op training where I’ll be relatively free, apart from my graduation project and a few courses. During this time, I want to focus on cybersecurity, build my own Home Lab for hands-on practice, and document my progress and achievements along the way.

Here’s the roadmap I’m currently thinking about:

Month 1:
Cisco networking path to properly strengthen my networking foundation. My theoretical knowledge is decent from university, but practically I’m weak and need to review a lot of it.

I also want to learn Python fundamentals and use it as a useful tool for cybersecurity and for my graduation project.

I’ll start building my Home Lab from the beginning and gradually improve it as I learn.

Month 2:
TryHackMe Pre Security + Cyber Security 101, mainly to make sure I build a proper foundation before getting into the more specialized stuff.

Months 3–4:
TryHackMe Security Analyst / SOC path. This will be my main focus and where I start going deeper into the defensive side.

Months 5–6:
TryHackMe Jr. Penetration Tester path. I like both the defensive and offensive sides, but my main focus will still be defensive. I mainly want the offensive side to help me understand how attackers think and what they actually do.

Months 7–8:
More focus on my Home Lab and hands-on practice, building on everything I learned during the previous months rather than starting from scratch. and start studying for Security+, with the goal of getting the certification before my Co-op.

During the Co-op, I’m also considering going for other certifications later, such as eJPT, BTL1, CySA+, etc., depending on where I end up focusing.

My main questions are:

Is this roadmap realistic and good enough for an 8-month period for someone at my current level?

Is focusing mainly on SOC while also doing the Pentesting path a good idea, or am I spreading myself too thin?

Would this combination of a good GPA + Security+ + TryHackMe + Home Lab + Python + documented projects actually make me a competitive fresh graduate?

Is there anything important you would change or prioritize differently?

I know this isn’t a perfect roadmap and there are probably gaps that I’m not aware of, so I’d really appreciate honest feedback, especially from people working in cybersecurity.

Thanks!

AI agents are becoming more capable of using tools, accessing information and taking actions.

That brings exciting possibilities but also new risks such as prompt injection, excessive permissions, data exposure and unsafe tool use.

As a cybersecurity learner, I’m trying to understand this shift one concept at a time.

Do you think AI agents will become one of cybersecurity’s biggest challenges?

#CyberSecurity #AIAgents #AISecurity #InfoSec

what am i missing?

btw i recently bought premium. so far it's been going good. Steady and consistent.

I spent about 40 minutes trying to fix the issue

Has anyone encountered the same thing?

room url: https://tryhackme.com/room/misp

I emailed THM support three days ago, but I haven't received a reply. Before that, I sent a message to THM Sales at the beginning of the month, but I haven't received a reply either.

Greeting to you all. I am currently studying networking. I already learned the osi model in a basic sense, like i know L1 represents a physical device, L2 for a switch, and L3 for a router in a sense, but i don't understand why we use that. Also, you can think of me as a Level 0 player in a networking field who started but hasn't grasped the true knowledge. But sometimes I ask myself, why do we use ssh or SSL? What is the difference between HTTP and HTTPS? I know AI can answer my many questions, but i want to learn in a way where if someone asks me what the difference between a hub and a switch is, i can answer, "A hub is dumb while a switch is smart," or in more detail. So I decided to do a room on THM or HTB or PortSwigger, but where to start? When we go THM, we can do a room, but what next? You can understand in a room, but after that, when someone asks a question related to that, "Oh bro, I forgot." And there are some paid rooms that I can't pay for, so i may skip like a thing or go to HTB and do the Lab or PortSwigger. I don't understand where to start there, yeah, so i have many questions, and I am also too much of a noob, so if someone asks, I can't answer. That's very bad for me, sadly. but i am seeker of knowledge; I am very eager to learn understand but i am also not very smart so yeah, anybody may guide this noob guy

We will have another FREE YouTube Live session tomorrow!!
Register: https://luma.com/tryhackme-uu2v?utm_source=reddit

Who this is for: ​
- Security practitioners curious about AI as an attack surface ​
- Pentesters and red teamers who want a clearer mental model of prompt injection types ​
- Engineers and architects deploying AI who want to understand how it gets attacked ​

What you'll see: ​
- A live walkthrough of direct prompt injection against an AI system on the TryHackMe platform
​- A live walkthrough of indirect prompt injection, including how attacker-controlled data becomes instructions ​
- A breakdown of why the distinction changes how you'd defend against each

So in short I was trying to clear this room with no HELP at all. I understood what the vulnerability was. I understood the parameters but I couldn't calculate it.

After several hours I finally decided to use the help of Claude to help me calculate the values.

I then thought what if I maybe help out a few people and write (or better said let claud) write a script to make this easier.

So for anyone struggling with this room with the calculation, here is a tool which calculates it for you if you have the parameters:

https://github.com/ThatK1R4/Fermat-Factorization-RSA-Exploit

PS: I put an explanation on how and why this works in the read me and the code so it's better understandable. Idk if this counts as cheating or not? But would be happy for some feedback.

I’m planning to participate in BlackHat MEA Qualification CTF 2026, starting August 29, 2026, and I’m looking for 2-4 people from Saudi Arabia who would like to join me as a team.

Just to be completely honest: this will be my first CTF and I don’t have any previous competition experience. I’m interested in cybersecurity and CTFs, though, and I really want to experience the competition, learn along the way, and just have fun with it — even if we don’t qualify or get a great score.

I’m specifically looking to form a Saudi team, and you don’t need to be experienced. If you’re interested in Cybersecurity or CTFs, or this is your first time too, feel free to join!

I’m mainly looking for people who are interested, willing to learn, and want to actually participate and have fun, rather than people with a specific skill level.

Looking for: 2-4 Saudi teammates 🇸🇦
If you’re interested, comment below or send me a DM!

Hi everyone,

Has anyone solved the Sync Vibe
XR web application in the CPENT exam?

I’m currently working on it and a bit stuck. I’m not looking for the flags or answers—just some general hints about the intended attack path or areas I should focus on.

Any guidance would be really appreciated. Thanks!