Blog

A Day in the Life of a Cybersecurity Analyst – Passwords

Why Your Passwords Stink and How to Fix Them

Passwords…we all have them…lots of them!! And to be safe, we need a different password for each log-in site. Why? Because otherwise, if one gets compromised, then they all get compromised.

In 2021, 123456 was the most commonly used password. What does this tell you? Yup, we aren’t giving much thought to our passwords. And do you suppose we’re changing them frequently, as we should? Nope.

Ah, you say, we now have multi-factor authentication confirming our identity, so passwords are less important. True, multi-factor authentication protects us a bit more, but NOT TRUE that we can be less diligent about password management.

Strong passwords do help to protect your accounts. But a strong, compromised password that’s used on every one of your accounts is still a compromised password that potentially opens all of your accounts to the bad guys. Too many people use the same password for every account, and the bad guys know this.

What to do?

New A+ Exam Available

The new CompTIA A+ Core 1 and Core 2 Exams are out! Ready to take on the challenge of being an IT Tech superhero? Check out the details:

From CompTIA:

CompTIA A+ certified professionals are proven problem solvers. They support today’s core technologies from security to networking to virtualization and more. CompTIA A+ is the industry standard for launching IT careers into today’s digital world.

CompTIA A+ is the only industry recognized credential with performance testing to prove pros can think on their feet to perform critical IT support tasks. It is trusted by employers around the world to identify the go-to person in end point management & technical support roles. CompTIA A+ appears in more tech support job listings than any other IT credential.

The CompTIA A+ Core Series requires candidates to pass two exams: Core 1 (220-1101) and Core 2 (220-1102) covering the following new content, emphasizing the technologies and skills IT pros need to support a hybrid workforce.

FREE Cybersecurity Resume Review Workshop Monday 10/10 from 12-1pm ET

The need for trained cyber professionals is so mission-critical that we want to help you advance no matter where you are on your path.

My pal, Hasan Eksi, at my sister company CyberNow Labs, is conducting a live cyber resume review workshop tomorrow to provide you with tips that will help you secure the interview!

As co-founder of CyberNow Labs and National Cyber Group, Hasan has helped thousands of people – with or without an IT background – successfully enter this rewarding career. Former SOC Director for multinational companies MasterCard and Capital One; Hasan has 10 years in the industry and is prepared to share his expertise.

Whether you want to have YOUR cybersecurity resume reviewed during this live session or you just want to sit in to learn the tips and tricks, simply:

1) Join the live steam event on LinkedIn tomorrow (Monday, Oct 10) at 12-1 pm ET.

Add the event to your calendar when you log in so you get reminded: 

2) Submit your resume if you’d like to be considered for live review at info@cybernowlabs.com and they’ll confirm with you.

BONUS LEARNING: If you do attend the live session, you’ll hear about a complimentary personal resume review as another mentoring opportunity.

Hope to see you online tomorrow

Mike

A Day in the Life of a Cybersecurity Analyst – Phishing

Something Fishy about Phishing 

(A Proofpoint Tool Scenario) 

I sat down with my pal Richard Chapman, Program Director for CyberNow Labs, with this question, how to tell if an email is a phishing expedition?

Ironically, the largest threat to organizations is not necessarily the bad actors themselves, but rather that the employees are easily hooked into engaging with phishing emails because they’re in a hurry.

Usually, the phishing signs are visible to an end-user if they’re looking carefully, but…many don’t.

A big part of being a Cybersecurity Analyst is dealing with Alerts.

Sec+ Technical Interview Questions and Answers

Top 5 Technical Interview Questions for Security+ Certified Job Interview 

 I sat down with my pal Richard Chapman, Program Director for CyberNow Labs, to go through frequently asked interview questions to help those who have Security+ Certification prepare, when they may not have the contextual experience yet. 

 I have made it a mission in technical interviews to get candidates to respond with an answer that is completely OK to say. But there is a key element to the response. 

And that is: “I Don’t Know.” 

The key is to finish that response with: “But I know how to find the answer.” 

We started off this episode with Question 1: What is the CIA Triad of Security? 

 It’s easy to repeat what the acronym stands for: Confidentiality, Integrity, Availability.  But these days there’s the extra layer of Compliance, Laws, Regulations, Standards. 

 So, it really goes from CIA to CYA. And you can figure out what that means. 

 By the way, we did get into a tangent discussion about Star Trek mid-way through. 

Watch this episode of 2 Bald Guys for our Top 5 Technical Interview Questions and expected responses.

Opportunities to learn more about accelerating your career to the next level in an upcoming Free Live Info Session with your 2 favorite bald guys (me and Richard): 

A Day in the Life of a Cybersecurity Analyst – SIEM QRadar Tool

I sat down with my pal Richard Chapman, Program Director for CyberNow Labs, with this question, what is SIEM and what does it do?

First, you’d have to know what SIEM stands for before you could even begin to understand what it’s used for. (Security Information & Event Management, so you don’t have to look it up.) 

 Find out why SIEM tools are much more than just automating the number of logs analysts have to filter through. 

Watch this 2 Bald Guys SIEM QRadar Tool Episode

Intrigued?  

Want to learn more about an UNbootcamp program that not only gives you real work experience but also helps you secure your job?  Join Mike and Richard for an upcoming live info session. 

Watch This Two Bald Guys SIEM QRadar Tool Episode to learn more

Upcoming opportunities to learn more in a free, LIVE Info Session – with the 2 Bald Guys, me (Mike) and Richard:

Top 10 Reasons Why Security+ Certification Is A Must-Have Credential

It’s no secret that there’s a big gap, no matter what data source you look at, between the number of cybersecurity job openings and the number of qualified professionals. (CyberCrime Magazine has the cyber skills gap at 3.5 million by 2025!) Couple that with the ever-present and growing threat in our economy with the estimated loss from malicious attacks in the BILLIONS, and you’ve got a recipe for urgency to solve the gap and defend our nation. Get more intel in this Gap Report

Join Mike Meyers and the Team from CyberNow Labs for a complimentary Cybersecurity Career Info-Session this Saturday, June 18, 1 pm ET and learn about the ‘UN’Bootcamp. Hear from alumni, expert instructors, mentors, and job placement career services, about opportunities in Cybersecurity.  

Click here to register, or copy the links below to your browser to reserve your spot: https://cybernowlabs.zoom.us/webinar/register/WN_WJrord8nR9KVW1ACP6nvMg 

Can’t make this date/time? Register anyway to receive the post-event recording and bonus materials. 

#10. Why do businesses (private sector) and government agencies (public sector) want you to have CompTIA Security+ certification?

• Security+ is the preferred qualifying credential for early-career cyber professionals.
• Many job postings require certification as a must-have for consideration because it’s a qualifier for having a foundational understanding.
• In many organizations, certifications are also required to remain billable on key programs/projects.
• NOTE: not all jobs require security clearances, that should not be a deterrent from applying.

#9.  What jobs would I look for with the Security+ credential?

• Cybersecurity Analyst is the foundational role in cybersecurity, and it’s where the biggest gap lies.
• Annual salaries for a Cybersecurity Analyst range from $85,000 – $100,000+ USD.
• NOTE: Cybersecurity Analyst job title also goes by SOC Analyst, Incident Responder, Information Security Analyst, and many more…yes, this job role could benefit from standardization!

Certification Prep Survey

Please help us learn about your certification prep study habits. The better we know what works for our students the better resources we can offer. 

Please click the link to take the survey: https://forms.office.com/r/LwycYbqNHg