Get the latest Cyber Security insights
Explore expert perspectives, trends, and practical guidance to help teams stay ahead in cyber security.
SOAR Playbooks vs. Agentic AI: What Triggers the Response?
A SOAR playbook may execute containment when predefined conditions are met. While an AI agent may examine the evidence, determine that isolation is necessary, and select the action itself.
How to Become a DFIR Analyst in 2027: Skills, Certifications, and Portfolio Projects
If you enjoy investigating suspicious activity, piecing together evidence, and figuring out how an attack happened, digital forensics and incident response (DFIR) could be a good career path.
The Most In-Demand Cyber Security Skills for 2027
AI is becoming part of everyday security work, more businesses are relying on cloud infrastructure, and attackers continue to find ways around existing defences.
The Cyber Security Career Without a Degree: What Employers Now Accept as Proof of Skill
This guide explains what employers look for, which skills and certifications can strengthen your application, and how to build practical experience through TryHackMe.
What Cyber Security Professionals Actually Earn in the UK in 2026
In this guide, we'll explore what different cyber security jobs pay in 2026, how salaries vary across the UK, and which skills and certifications can help you prepare for your next career move.
Detection Engineering vs Threat Hunting: Which Should You Learn First?
Detection engineering focuses on creating reliable ways to identify suspicious behaviour. Threat hunting focuses on proactively searching for evidence of threats that may already be present in an environment.
Still learning on shift: Harees Ahmed on why upskilling doesn't stop at Level 2
Harees Ahmed started on TryHackMe as a college student nearly eight years ago. He’s now a Level 2 SOC Analyst and SAL2 Founding Operator, and he’s still learning on shift, because the threats keep changing.
Blue Team Is Only Half Your Job: Kostiantyn Sokolianskyi, Ukraine's #1 on TryHackMe, on Practice and the Bar You Set Yourself
Kostiantyn Sokolianskyi heads information security at Valesto, one of Ukraine’s best-known filo dough producers, and still trains like an individual contributor. The SAL2 Founding Operator explains why practice beats reading, and how to get training budget signed off.
Every TryHackMe certification, one treadmill and an escape room: Karol Wróblewski's story
Most people collect a certification or two. Karol Wróblewski, also known as AnimSparrow, decided to collect all of them, then write a detailed review of each one, "because apparently I don't have enough hobbies."
The PHP Patch Is Out. The Bug Wasn’t Where Anyone Thought
The vulnerabilities are rooted in PHP’s internal memory management and error handling. The upload-progress feature provides one possible route into the problem, but disabling it cannot protect against both flaws.
PHP2Shell: Tracking an Unpatched RCE Scare in Real Time
Researchers are discussing a leaked exploit, website administrators are scrambling to protect their servers, and a one-line fix is spreading across security forums.
GhostLock (CVE-2026-43499): What It Is, Who’s Affected, and How to Practice Defending Against It
GhostLock is a local Linux kernel vulnerability affecting the real-time mutex (rtmutex) code, which helps processes coordinate access to shared resources.
Windows Incident Response & Forensics: What You’ll Learn, Who It’s For, and Why It’s on MAX
The Windows Incident Response & Forensics path is a specialist learning path designed to help you investigate security incidents in Windows environments.
Windows IR in Practice: 6 Common Scenarios and How to Prepare
We cover six common Windows IR scenarios, the evidence to examine, and practical exercises to help you prepare using TryHackMe’s Windows Incident Response & Forensics path.
DFIR vs SOC Analysis: Which Blue Team Path Should You Learn First?
If you’re getting into defensive cyber security, you’ll likely come across two areas: SOC analysis and digital forensics and incident response (DFIR).
Looking to upskill your security team?
Discover how TryHackMe for Business helps organizations build hands-on cyber capabilities through training, labs, and expert-led resources.