Tech World Software SchoolTWSS

from first concept to confident practice

Cybersecurity

Protect systems and data with practical security fundamentals.

Start learning 15 lessons · first lesson about 33 min · free · no account needed
About this track

Learn to think like a defender: what’s worth protecting, how attackers get in, and how to stop them - or catch them fast when they do.

You’ll weigh risks, distinguish hacker labels from red, blue and purple team roles, trace the history of worms and viruses, recognize software used in malicious campaigns, threat-model a system with STRIDE, spot phishing, protect accounts and limit lateral movement, crack a classical cipher and see why modern cryptography holds, secure cloud-stored data, keep code and data apart on the web, manage vulnerabilities and the software supply chain, then detect attacks in logs and respond to incidents. You’ll also use AI to examine security evidence, study real AI-assisted vulnerability research, and defend agents against prompt injection and excessive permissions. Along the way you’ll hunt for red flags, test passwords, turn a cipher wheel, watch hashes avalanche, step through TLS and CSRF, and fix a network rule that exposes a database. Where a security bug lives in code, you’ll write and fix real Python in your browser. Everywhere else you’ll do the job itself: reading output, reviewing configs and running an incident. The capstone has you investigate a breach from its logs. Everything here is defensive.

Before you start
  • No cybersecurity experience is required.
  • Basic Python, for the coding exercises.
Loading progress…
  1. Unit 1 · 0/3 lessons

    Security foundations

    Weigh risks, learn hacker roles and attack history, threat-model with STRIDE, and spot social engineering. Badge: Risk mapper

    1. 0x001Think in security risksUse the CIA triad to rank risks, and distinguish hacker labels from security team roles. 33 min 33 min
    2. 0x102How attacks evolved and how to threat-modelRecognize malware and attacker tools, then use data flows and STRIDE to find threats. 38 min 38 min
    3. 0x203Spot phishing and social engineeringRecognize the tricks that target people instead of computers, and check where links really go. 20 min 20 min
  2. Unit 2 · 0/4 lessons

    Identity and cryptography

    Control access and lateral movement, store passwords safely, and protect data with TLS and cloud permissions. Badge: Key keeper

    1. 0x304Protect identities and accessSeparate authentication from authorization, limit access, and contain a compromised device. 28 min 0/1 exercises solved 28 min 0/1 exercises solved
    2. 0x405Passwords, passkeys and MFAApply modern password rules, store passwords safely, and choose phishing-resistant sign-in. 25 min 0/1 exercises solved 25 min 0/1 exercises solved
    3. 0x506Crack a cipher, trust a hashBreak a Caesar cipher with frequency analysis, then see what makes modern hashes different. 22 min 0/1 exercises solved 22 min 0/1 exercises solved
    4. 0x607Handle data and encryption safelyUse encryption and TLS, manage keys, and keep cloud-stored data private. 37 min 0/1 exercises solved 37 min 0/1 exercises solved
  3. Unit 3 · 0/3 lessons

    Secure systems

    Stop injection and XSS, defend the browser, and manage vulnerable software and dependencies. Badge: Secure builder

    1. 0x708Recognize common web risksKeep data separate from code: parameterized queries, output encoding and allowlists. 22 min 0/1 exercises solved 22 min 0/1 exercises solved
    2. 0x809Defend the browser: XSS, CSRF and cookiesUnderstand cross-site scripting and request forgery, and the browser features that stop them. 22 min 22 min
    3. 0x9010Build security into developmentUse secure defaults, protect dependencies and secrets, and prioritize real-world vulnerabilities. 35 min 0/1 exercises solved 35 min 0/1 exercises solved
  4. Unit 4 · 0/2 lessons

    Detection, response and recovery

    Log and detect attacks, respond to incidents, and recover from backups. Badge: Incident responder

    1. 0xA011Log, detect and alertRecord the right security events, keep secrets out of logs, and turn patterns into alerts. 22 min 0/2 exercises solved 22 min 0/2 exercises solved
    2. 0xB012Respond to incidents and recoverPrepare, contain, eradicate and recover - and make sure backups really work. 26 min 26 min
  5. Unit 5 · 0/2 lessons

    AI and cybersecurity

    Use AI for investigation and testing, recognize AI-assisted attacks, and secure agents and their tools. Badge: AI security analyst

    1. 0xC013Use AI as a security teammateUse AI to investigate, test and prioritize without letting plausible text replace evidence. 27 min 27 min
    2. 0xD014Defend against AI-enabled attacks and unsafe agentsRecognize AI-assisted abuse and secure agents that read untrusted content and use tools. 28 min 28 min
  6. Unit 6 · 0/1 lessons

    Capstone

    Investigate a breach from its logs. Badge: Breach investigator

    1. 0xE015Capstone: investigate a breachWork through real-looking logs like a security analyst: find the scanner, the stolen account and the stolen data. 35 min 0/2 exercises solved 35 min 0/2 exercises solved