Learning path

Defend with AI

For SOC analysts and IT teams: today's AI-powered attacks, and how to use AI to fight back.

22 lessons · 114 min left

Start path → What a large language model does

FoundationsLesson 2: What a large language model doesAn LLM is autocomplete that swallowed a library. Understanding that one sentence explains most of its strengths and every one of its weaknesses.Beginner4 min read🧪 Lab📝 TestUp next
Stopping AI-powered attacksLesson 126: How attackers use AI todayAI makes attacks faster, cleaner and more personal. But attackers still need someone to click, pay or share. That is where you can stop them.Beginner5 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 127: AI-written phishing at scalePhishing emails no longer have spelling mistakes. Learn what to check instead: the sender, the request, the pressure and where the link really goes.Beginner4 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 128: Voice clones and deepfake video calls at workA call can sound like your director and a video call can show a familiar face, and both can be fake. Learn the signs, their limits, and the process that works anyway.Beginner5 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 129: Fake bosses, fake vendors: payment fraud with AIBusiness email compromise and fake invoices cost organisations real money. A few simple payment rules stop most of it.Beginner6 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 130: Fake job candidates and hiring fraudAI can polish a fake CV, and someone else can sit the interview. Fake job offers also target people looking for work. Learn the checks that protect both sides.Beginner4 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 131: AI-made malware: hype and realityAI can help attackers write code and lures faster. But most attacks still use known techniques, and the basic defences still work.Middle6 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 132: Verify out of band: the callback ruleWhen a request is risky, check it through a different channel you already trust. Here's how to design a verification procedure people will actually use.Beginner5 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 133: Phishing-resistant sign-in: passkeys and security keysOTPs, SMS codes and push approvals can be phished or worn down. Passkeys and security keys work only on the real website. Here's why, and how to roll them out.Middle5 min read🧪 Lab📝 Test
Stopping AI-powered attacksLesson 134: Training people for the AI era of scamsOld awareness training said 'look for typos'. New training teaches people to check requests, report fast, and never feel ashamed. Here's how to update it.Middle5 min read🧪 Lab📝 Test
AI for security defendersLesson 158: What AI can and cannot do for defendersAI is a fast helper for reading, writing and explaining. It is not a source of truth. Learn where the line is, and how to handle data safely.Middle6 min read🧪 Lab📝 Test
AI for security defendersLesson 159: Alert triage with AITriage means deciding quickly how serious an alert is. AI can gather context and draft a summary, if you give it the evidence and keep the final call.Middle5 min read🧪 Lab📝 Test
AI for security defendersLesson 160: From copilot to agentic SOCAn assistant answers questions. An agent can run investigation steps by itself. That power needs guardrails, approvals and measurement.Advanced6 min read🧪 Lab📝 Test
AI for security defendersLesson 161: Threat hunting with AIThreat hunting means searching for attackers who have not triggered any alert. AI can help turn an idea into a query, but you must test it.Middle5 min read🧪 Lab📝 Test
AI for security defendersLesson 162: Detection engineering with AI helpDetection engineers turn attacker behaviour into rules. AI can draft and translate rules fast, but every rule must be tested and reviewed like code.Advanced5 min read🧪 Lab📝 Test
AI for security defendersLesson 163: Phishing and malware analysis with AIAI can summarise suspicious emails, pull out indicators, explain scripts and draft YARA rules. Analyse safely, and never trust its verdict without checking.Middle6 min read🧪 Lab📝 Test
AI for security defendersLesson 164: AI-assisted vulnerability discoveryFuzzers and static analysis tools find possible bugs. AI can help point them in the right direction and sort the results, but people confirm and report responsibly.Advanced5 min read🧪 Lab📝 Test
AI for security defendersLesson 165: Secure code review with AIAI can review pull requests for security problems in seconds. Learn what it catches, what it misses, and how to check that a fix really works.Middle6 min read🧪 Lab📝 Test
AI for security defendersLesson 166: Attacks on AI security tools: poisoned logs and prompt injectionAn AI analyst reads data that attackers can write. Hidden instructions in logs, emails or file names can trick it. Learn how, and how to defend.Advanced5 min read🧪 Lab📝 Test
AI for security defendersLesson 167: Evaluating and buying AI security toolsMany security products now include AI. Ask the right questions, test on your own data, and compare against a baseline before you buy.Middle6 min read🧪 Lab📝 Test
AI for security defendersLesson 168: Careers in AI securityAI security is growing, and there are many ways in. Learn the main roles, the skills to build, and how to show your work safely and ethically.Middle5 min read🧪 Lab📝 Test
Agent securityLesson 24: When it goes wrong: response and kill switchesAssume an incident. Write the plan now, while nothing is on fire and you can still think clearly.Middle5 min read🧪 Lab📝 Test