Sixty-second explainers, quick quizzes, and a new beginner challenge every month. Free, no sign-up, and everything stays in your browser.
Short, plain-English lessons on the threats that matter most. Share them with your team, then test yourself with the quizzes below.
Phishing is a message that tricks you into clicking, paying, or sharing a password. Red flags: urgency, secrecy, unexpected attachments, and links whose real domain does not match the sender. When in doubt, contact the person or company another way. Report it; do not just delete it.
Use long passphrases of four or more random words, a unique one for every account, stored in a password manager. Turn on multi-factor authentication (MFA), ideally passkeys. Change a password when there is a sign it leaked, not on a fixed schedule.
Ransomware locks your files and often steals copies to pressure you into paying. Your best protection is MFA, fast patching, and backups kept offline and tested. If it happens, disconnect affected devices, call your information technology (IT) provider and insurer, and do not pay without legal advice.
artificial intelligence (AI) can now fake a voice from a short clip and a face on a live video call. You cannot rely on spotting it. Instead, verify any request for money or access by calling back on a known number, and require two people to approve payments.
Use approved business AI tools, never paste confidential or personal data into free chatbots, and check every fact, figure, and citation the AI gives you. AI can be confidently wrong. A person stays responsible for the final decision.
Most attacks use flaws that already have fixes. Turn on automatic updates for phones, computers, browsers, and apps, and replace devices that no longer get updates. Routers, firewalls, and virtual private networks (VPNs) need updates too.
Each quiz has five questions with explanations. Your answers stay in your browser.
A capture the flag (CTF) is a security puzzle where you find a hidden “flag.” This month's beginner challenge takes two steps in the free CyberChef tool.
We intercepted this message:
QVJLSEZ7ZnJlaXJfc3ZlZmdfZnJwaGVyX255am5sZn0=
Solved it? Share your solve on LinkedIn and tag Nexus Security Advisors, or email [email protected] for a shout-out. Never share the flag itself publicly until the month ends. Want more? Try picoCTF.
Open the Risk Lab, pick each scenario, and switch on controls until every residual risk is under 10 (medium or low). Then download your leadership report. The fewest controls wins bragging rights, and teaches the real lesson: some controls reduce far more risk than others.
Tell us your industry, size, and the security or compliance challenge in front of you. We'll tell you plainly whether we're a fit.