Addressing Tech Sprawl: A Guide to Modernizing Cyber Defense

Friday, October 9, 3:00 PM - 3:45 PM GMT+2

Register Now🎟️ https://luma.com/tryhackme-q9op?utm_source=reddit

​Who this is for:

• ​Security leaders and managers who want to reduce reliance on a disjointed stack of point solutions
• ​SOC analysts, detection engineers, and incident responders who want to understand where SecOps is heading
• ​IT and architecture teams preparing their security program for the demands of AI-era threats

​What you will learn:

• ​Why most current security architectures are neither effective nor efficient
• ​How to align people into a fully capable investigative unit
• ​Why XDR is the lynchpin for starting the digital transformation of a SecOps program
• ​How to dissect a security reference architecture powered by AI
• ​A program roadmap for getting from where you are to where you need to be

Hosted by:

​Jess Huber, Managing Principal of Unified SecOps LLC and Technical Distinguished Principal at GM Financial, brings more than 25 years in cybersecurity across incident response, security operations, and executive-level cyber strategy. He founded Microsoft Premier Field Engineering Scarce Skills Security team and was a co-founding member of the Microsoft Detection and Response Team (DaRT), helping establish one of the most recognized incident response capabilities in the industry. He went on to serve as Global Head of Cyber Incident Response at Deloitte, leading large-scale investigations and driving the transformation of global cyber defense operations.

​Jess provides vCISO services to organizations maturing their security posture, and brings deep expertise in Microsoft 365 security, threat detection, and incident response. His approach is proactive and educational, running cyber wargames for executive teams and IT organizations to prepare them for real-world crises.

Hey everyone! Our C2 framework workshop is back by popular demand, and it runs tomorrow, 1 October, from 3:00 PM to 7:00 PM CEST (13:00 to 17:00 UTC) on Zoom. There are a few seats left in the cohort before registration closes.

Register here🎟️ https://luma.com/mcs9ojkw?utm\_source=reddit

You will spend the session operating a real open-source C2 in a dedicated lab range, working through the full chain the way an operator would on a live engagement: Stand up the team server, generate an agent and land your first foothold

• Run post-exploitation with OPSEC in mind, including sleep, jitter, in-process execution and Beacon Object Files
• Pivot deeper into the range with SOCKS proxying, port forwarding and lateral movement
• Finish with a detection walkthrough showing how the blue team catches everything you just ran

Instructors: Ariz Soriano(Senior Content Engineer at TryHackMe and Associate Director of Red Team Operations at THEOS Cyber) and Andrea Brosio(Senior Content Engineer at TryHackMe, offensive security engineer with 6+ years in red teaming and a DEF CON speaker).

**Included:**full session recording, a certificate of participation with CPE credits, and a closing Q&A with both instructors.

No prior C2 experience is needed. It works for pentesters and red teamers building structured tradecraft, as well as blue teamers and detection engineers who want to see how operators actually move.

Price:$200 standard, or $160 per person with a team ticket (**20% off for groups**).

Can't make it? Register anyway! We will send you the recording and the slides🌟

Register here🎟️ https://luma.com/mcs9ojkw?utm\_source=reddit

Supercharging Your Pentesting With AI

Wednesday, September 30, 3:00 PM - 8:00 PM GMT+2
Register now🔥 https://luma.com/tryhackme-b48c?utm_source=reddit​

What you'll learn

One vulnerability is all it takes to destroy the reputation of a company. Today, a single attacker can use AI to multiply their skills 100x and launch attacks faster than ever. To keep up, security engineers need to do the same.

This workshop teaches you how to 100x your work. Manual fuzzing, loading payload lists into Burp Suite Intruder and reading every request and response header are no longer necessary. AI can handle all of that at speed, but only if you give it the right resources. You will learn how to set AI up to do in 2 hours what used to take a human 20.

• ​Real world examples of AI used in major attacks
• ​The importance of tool access for an AI model, and how to provide tools to them
• ​How to make and use a harness
• ​Bypassing guardrails and bulletproofing your prompts
• ​Troubleshooting and overcoming issues like rate-limits and account lockouts
• ​The importance of AI in the modern security world through hands-on labs and an intense but very fun CTF

​Instructor:

​Lucas Romano is the Manager of Security Operations at Cequence where he leads the SOC and also is a Security Researcher for the Synack Red Team. He's worked in every role from threat intelligence at the National Security Agency to naval cryptology to being the founding offensive security engineer of an agentic penetration testing company. He's passionate about teaching fellow practitioners the secrets of the trade and growing everyone to a higher level.

Your last engagement had web, cloud, and Active Directory on the same scope. Your cert probably tested one of them.

72 hours. 10 machines.

Multiple attack surfaces running simultaneously,  competing for your time from the first minute.

The first penetration testing certification with AI and LLM exploitation in the exam alongside Web, Active Directory and Cloud. And 30% of your mark comes from your report, graded finding by finding. Because getting in is only half the job...🤔

✅: 30% off until 29 September - code: BREACHALL

✅: 3 months of MAX free with every purchase

Get PT2 Certified➡️ https://tryhackme.com/certification/penetration-tester-level-2?utm_source=reddit&utm_medium=social&utm_campaign=pt2launch

Free Session on AWS Cloud Breach☁️💥

🎫Register Free: https://luma.com/tryhackme-tmtv?utm_source=reddit

Meet Andrei Chipaila, Senior AWS Cyber Security Content Engineer at TryHackMe! Andrei designs TryHackMe's hands-on AWS security labs and helps shape the AWS content roadmap.

We have a guest instructor, ​Eduard Agavriloae, Director R&D at OFFENSAI.

Want the complete breach walkthrough after the teaser? Join us for the hands-on workshop!

Attacking and Defending AWS - A Cloud Breach, Start to Finish

📆September 15th
🏆CPE certificate | 🌟$75
🎫Register Here: https://luma.com/tryhackme-ppwp?utm_source=reddit

What you'll learn:

Part 1: The Storm Rolls In (Attacker)

• How a small misconfiguration becomes a full compromise
• Working your way through a real cloud environment as an attacker would
• Spotting the leak before it becomes a flood

Part 2: Clearing the Skies (Defender)

• Reading the warning signs of an active breach
• Tracing the attack back to its root cause
• Steps to secure the environment and stop the storm

Optional: Building for Clear Skies (Secure Build)

• Hands-on session on secure cloud architecture
• Building the environment the right way, so the storm never hits

Prerequisites:

None. Lab environment provided in-browser, no AWS account needed.

📆 September 8, 3:00 PM - 3:30 PM GMT+2

📍 Online, YouTube Live
🎫 FREE, Register Here >>>​ https://luma.com/tryhackme-muqx?utm_source=reddit

Who this lightning lesson is for

​Anyone curious about how AI can be utilised to launch autonomous security assessments whether it be a penetration test, review of source code, etc.

​The key concepts you'll learn are

​- The fundamental concepts of why AI should be used in security testing and the impact it has
- What tools are used to make AI work more efficiently in security tests
- How you can weave AI into your security testing workflow

​Instructor

​Lucas Romano is the Manager of Security Operations at Cequence where he leads the SOC and also is a Security Researcher for the Synack Red Team. He's worked in every role from threat intelligence at the National Security Agency to naval cryptology to being the founding offensive security engineer of an agentic penetration testing company. He's passionate about teaching fellow practitioners the secrets of the trade and growing everyone to a higher level.

Attacking AI Systems: Threat Model to Exploit

• 📆 Thursday, September 3; 3:00 PM - 8:00 PM GMT+2​
• 🎫 Register here: https://luma.com/pfpgt4mw?utm_source=reddit

Who this workshop is for:

• ​Security practitioners who want hands-on time with one of the fastest-moving attack surfaces in the industry
• ​Pentesters and red teamers who need a structured way to assess AI systems
• ​Engineers and architects deploying AI who want to understand how it gets attacked

​​What's included:

• ​Live, hands-on sessions, two group practicals, not just talks
• ​Recording included, full Google Meet recording for everyone who registers
• ​A guest practitioner talk on AI bug bounty hunting
• ​Closing Q&A with all instructors on screen
• ​Certificate of participation with credits of CPE
• ​A place in a focused cohort of 45 practitioners

​​Instructors

​Max Robertson, Senior Content Engineer at TryHackMe.​

​Christian Urcuqui, Content Engineer at TryHackMe, University Lecturer at Universidad ICESI and previously ​Data Scientist at CISCO

Guest Speaker

Valen Tagliabue, AI Researcher, Fellow at Digital Sentience Consortium, Oxford’s FIG fellow

We will have another FREE YouTube Live session tomorrow!!
Register: https://luma.com/tryhackme-uu2v?utm_source=reddit

Who this is for: ​
- Security practitioners curious about AI as an attack surface ​
- Pentesters and red teamers who want a clearer mental model of prompt injection types ​
- Engineers and architects deploying AI who want to understand how it gets attacked ​

What you'll see: ​
- A live walkthrough of direct prompt injection against an AI system on the TryHackMe platform
​- A live walkthrough of indirect prompt injection, including how attacker-controlled data becomes instructions ​
- A breakdown of why the distinction changes how you'd defend against each

Building and Breaking Active Directory Basic

We are going to host a 4-hour workshop for students and young professionals! The instructors are from THM and MWR CyberSec.

📅Wednesday, August 26 (7:00–11:00 AM PDT / 10:00 AM–2:00 PM EDT / 3:00–7:00 PM BST)

🎓 50USD per seat, up to 50 participants

🎫Register here: https://luma.com/tryhackme-5pfu?utm_source=reddit

Who this workshop is for:

• ​Security practitioners who want hands-on time with the backbone of enterprise networks
• ​Pentesters and red teamers who want a structured approach to attacking Active Directory
• ​Sysadmins and engineers who manage AD and want to understand how it gets broken

​What's included:

• ​A live, hands-on session where you build the environment yourself
• ​Full recording, sent to everyone who registers
• ​A spot in a focused cohort of 50 practitioners
• ​A Certificate of Participation with CPE credits

​What you'll learn:

• ​Build an Active Directory environment from scratch
• ​Configure users, groups, and GPOs
• ​Enumerate the environment to uncover common misconfigurations
• ​Execute a full attack chain, exploiting those misconfigurations to achieve Domain Administrator privileges

Level 1 taught you what to do with an alert. Level 2 teaches you what to do about it.
SOC Level 2 is completely rebuilt, 76 rooms across the environments hiring managers actually screen for at L2: Microsoft 365, Entra, AWS, Active Directory, and detection engineering. Kick things off with THE DEEP DIVE & 150 SAL2 cert prizes on the table until Aug 27🎯

Get Hacking➡️ https://tryhackme.com/thedeepdive?utm_source=discord&utm_medium=social&utm_campaign=thedeepdivesocl2

Join us for a live AMA with two of the people shaping TryHackMe!
Ben Spring is the co-founder and CEO of TryHackMe, helping build the platform from the ground up into a learning platform used by millions of cybersecurity learners worldwide.
Stefan Apostol is a Content Engineer at TryHackMe, working on the technical rooms and challenges you train on every day.

This is your chance to ask about TryHackMe's direction, content strategy, career paths in cybersecurity, or anything else on your mind. We're collecting questions in advance.
Drop yours when you RSVP, and we'll prioritize them during the session!

📅Friday, August 14, 2026, 7:00 PM CET
🎫Register here: https://luma.com/tryhackme-wykt

TryHackMe is heading to DEF CON 34 at Blue Team Village, August 6-9, Las Vegas🎰

Find us at the booth for:

1. Overflow the Jackpot, our on-site CTF🚀 Top 100 finishers win a challenge coin and a T-shirt.
2. Talks and demos from our content engineers Andrea Brosio and Ariz Soriano across Demo Labs Track 6, Cloud Village, Adversary Village, and Red Team Village.
3. Short on-camera interviews. Take part and walk away with the full THM SWAG bundle🎉

See you in Vegas!

14 rooms, 14 days, one story that unfolds a piece at a time.
Day 1: VERA, the AI concierge, greets you by name. She knows your room. She knows your coffee order. You never told her either.

Every room you clear earns a raffle ticket toward a $50,000+ prize pool. A new one drops every day at 16:00 UTC.

Room 1 is waiting: https://tryhackme.com/hackerholidays?utm_source=discord&utm_medium=social&utm_campaign=hackerholidays

"Which web security certification actually proves I can do the job?" 👀 🔴

We built WEB1 to answer that. One exam, three access models: Blackbox, Whitebox, and Greybox testing everything from authentication flaws to server-side exploitation against live applications.

Want to prove your web security skills against live applications, not multiple-choice questions? 🎯

Get WEB1 Certified🔥: https://tryhackme.com/certification/web-application-pentester-level-1?utm_source=discord&utm_medium=social&utm_campaign=web1launch

We're inviting one lucky user who has been impacted by TryHackMe to our company retreat in Malta on Sept 21-25!☀️
Meet the team, enjoy activities, and relax at a 5-star resort. All expenses covered!🎉

Fill out the survey by the 24th of July at 12PM BST to be considered🔥

https://forms.gle/urg8YJmhvKknqdou6

CVE-2026-63030 dropped Friday. Our team had a room ready by Monday. You wrapped a pentest for a client. Their app is clean, but their WordPress blog wasn't in scope.

CVE-2026-63030 changes that conversation. An unauthenticated attacker can exploit the REST API with a SQL injection, forge an admin account, and achieve remote code execution.

This vulnerability was discovered using a GPT prompt and $25 by a security engineer with 3 years of experience. Not a nation-state, not a specialist research team. Understand the full exploit chain and how to mitigate it in our new threat room, WP2Shell.

🚀Available now on MAX:
https://tryhackme.com/room/wordpresscve202663030?utm_source=reddit&utm_medium=social&utm_campaign=recentthreatwordpress

The Byte Lotus is this year's Hacker Holidays:
One new room every day at 16:00 UTC, running from 27 July to 9 August, a story that unravels as you go, and a concierge named VERA who's a little too helpful....

Every room you clear earns a raffle ticket toward $50,000+ in prizes

Check-in 27 July...VERA is expecting you.
https://tryhackme.com/hackerholidays?utm_source=discord&utm_medium=social&utm_campaign=hackerholidays

Anatomy of a C2 Framework

• Wednesday, July 15
• 3:00 PM - 3:30 PM GMT+1
• Register here ➡️ https://luma.com/tryhackme-dba7?utm_source=reddit

Who this talk is for:

• ​Red teamers and operators who rely on a C2 framework and want to know if it's the right one
• ​Pentesters evaluating C2 options before committing to a toolset
• ​Security practitioners who want to understand what actually separates a good C2 architecture from one that burns an op

​What's included:

• ​Free Live Talk, grounded in real engagements
• ​Learn a practical checklist for evaluating any C2 framework

This time, we will welcome Ben, one of the founders of TryHackMe, will be there
📅TODAY 3rd July 2026
🕑7pm CET
📍Event Stage on THM Discord

https://discord.gg/yWaePFU83?event=1519764512822132807

Reading about C2 tradecraft is easy.
Getting hands-on time to actually operate one, end to end, is the hard part💻
Operating C2 for Red Team Operations is a 4-hour live workshop where you'll stand up a C2 server, land your first agent, run Beacon Object Files, and pivot across a lab range, the way a real op unfolds🎯

• Led by Ariz Soriano, Senior Content Engineer at TryHackMe.
• Built around hands-on operation with the cohort, not slides.
• No prior C2 experience needed🛠️

📅July 21st | 🕑14:00–18:00 BST | 🎟️Only 30 seats
https://luma.com/hc3w544c