Svertok
Search

New or curious

Start here

You do not need to memorize a wall of acronyms. Follow this sequence to understand what cybersecurity protects, how fraud overlaps, and where common attacks and controls fit.

Begin with Cybersecurity and fraud, then use each lesson’s Next lesson link or return here to see the full path.

  1. Blue system-access and ochre fraud-decision ribbons meet at one shared evidence table, then separate again.

    Step 1 of 8

    Cybersecurity and fraud

    A stolen login can begin as a cyber incident and end as fraud. Other scams need no software exploit at all.

    Security Foundations · Foundation

  2. A hazard approaches an exposed system while a vulnerability, resulting risk and layered controls remain visually distinct.

    Step 2 of 8

    Threat, vulnerability, risk, control

    A weakness is not the attacker, and a severe flaw does not create the same risk in every environment.

    Security Foundations · Foundation

  3. A recipient pauses where a legitimate message route and a deceptive route using the same envelope shape lead to different destinations.

    Step 3 of 8

    Phishing and social engineering

    The message is the delivery vehicle. The real attack is the pressure to click, disclose, approve, pay, or surrender access.

    Social Engineering · Foundation

  4. A common malicious-software structure branches into spying, credential theft, disruption and extortion behaviors.

    Step 4 of 8

    Malware types

    The labels describe behavior, delivery, or persistence. One malicious program can fit more than one label.

    Malware & Threats · Foundation

  5. A distinctive identity mark fits a verification stencil before appearing beside several resource tiles with different permission relationships.

    Step 5 of 8

    Authentication and authorization

    Many account failures make more sense once login, permissions, and identity proofing are treated as separate controls.

    Identity & Authentication · Foundation

  6. An abstract identity token is displaced from its account frame by an offset duplicate and diverted session ribbon.

    Step 6 of 8

    Account takeover

    The attacker’s goal is not merely to sign in. It is to use the trust, data, money, or permissions attached to the account.

    Payments & Account Fraud · Foundation

  7. Two verification strands are woven beside a site-and-device weave that excludes an unmatched lure thread.

    Step 7 of 8

    MFA and passkeys

    Not every second factor resists the same attack, and account recovery can still become the weakest path.

    Identity & Authentication · Foundation

  8. Preparation, detection, containment, recovery and learning occupy connected parts of one operational landscape.

    Step 8 of 8

    Incident response

    Preparation, detection, containment, recovery, communication, and learning belong to one risk-management loop.

    Incident Response · Practitioner

After the foundation

Choose what to explore next

For practitioners

Move into signals, investigations, controls, application security, and governance.

Explore careers

Compare Security Operations and Fraud Analyst learning paths.

Browse topics

Choose a subject without following another fixed sequence.