Innomerc What do you want
to understand?
101 lessons. Search activates when the index loads.
How RAG Works
Follow a question through retrieval and context assembly before a model generates an answer.
How AI Agents Work
Inspect the loop from goal to proposed tool action, enforced permission and observed result.
Prompt Injection Explained
See why source content must not become authority over an AI system’s instructions or tools.
Recovery Codes: Your Spare Way In
Prepare an alternative sign-in method before your usual second factor becomes unavailable.
Which Apps Still Have Access to Your Account?
Review old app connections and understand what removing access does and does not undo.
When Your Phone Number Moves Without You
Recognize an unexpected number transfer and act through your mobile carrier’s verified channels.
Before You Sell or Recycle a Device
Plan a safe handover without losing your files or handing them to the next owner.
Before You Add a Browser Extension
Understand the access a browser add-on requests before allowing it into your browsing.
Keep Service Secrets Out of Code
Follow an application credential from issuance to use, rotation and revocation.
Retry a Request Without Repeating the Action
Understand how an operation identifier helps distinguish a retry from a new action.
Decide How Long Information Should Stay
Give stored information a purpose, an owner and a review or removal decision.
Which Card Details Should You Keep Private?
Know when card details belong in a payment form, what never belongs in a message, and how to respond to exposure.
OTP: A Small Code That Can Open an Account
Understand one-time codes, unexpected requests and why a code is never a harmless message.
How to Use an Authenticator App Safely
Learn what rotating codes do and plan recovery before changing your phone.
Passkeys Without the Jargon
See how your device can sign you in without sending a reusable password.
Why One Password Should Not Protect Everything
Follow what happens when one leaked password also opens your email and shopping accounts.
Check Before You Scan and Pay
A QR code can hide a destination. Learn how to check it before signing in or paying.
Delivery Texts, Email Scams and Urgent Messages
Learn a repeatable way to check messages without needing to spot every spelling mistake.
When “Technical Support” Is the Scam
Recognize remote-access demands, frightening pop-ups and fake refund calls.
Safer Banking and Money Transfers
Check the recipient, amount and reason before approving a payment.
Check an Online Shop Before You Pay
Look beyond a padlock and a discount to assess a seller and its payment request.
Why Software Updates Matter
See how an update closes a known weakness and learn where to get it safely.
Protect the Phone That Holds Your Digital Life
Build a small set of habits for safer apps, accounts and everyday phone use.
Why Does This App Want My Contacts?
Match camera, location and contact permissions to the feature you actually want.
Website Notifications, Camera and Microphone Access
Understand browser permission prompts and remove unwanted website access.
Screen Locks and Device Encryption
See how a lock and protected storage help when a device is lost.
Backups: Keep a Way Back to Your Files
Understand why syncing is not enough and practice restoring a file before you need it.
Malware: Harmful Software, Explained Simply
Learn what malicious software can do and how to respond without trusting a fake repair.
Ransomware and Why Recovery Needs Preparation
See how files can become unavailable and why backups help without solving every consequence.
Share Moments Without Sharing Everything
Review who can see your posts, location and account details before publishing.
What Personal Information Should You Not Share?
Separate account secrets from identifying details and ordinary information shared for a clear purpose.
Secure Your Home Wi-Fi and Router
Understand the two router passwords and reduce unnecessary access to your home network.
When a Familiar Voice or Video Cannot Be Trusted
Verify an urgent request without relying only on a voice, face or convincing message.
I Clicked a Suspicious Link. What Now?
Choose the next step based on what happened: viewing, entering information, downloading or allowing access.
I Shared an OTP or Approved a Request
Act quickly on the account or payment the code was meant to authorize.
My Password Was Leaked. What Should I Change?
Secure the affected account, replace reused secrets and check access that may remain.
Take Back a Hacked Email or Social Account
Recover through the real provider and check what an intruder may have changed.
If Your Phone Is Lost or Stolen
Protect accounts and mobile service while using official lost-device tools.
Job Offers, Task Scams and Fake Recruiters
Protect your money and identity while looking for work or a new career.
Why a Stranger Wants Your Gift Card Code
Recognize a request to turn a gift card into a payment to an impersonator.
Who Can Open Your Shared Link?
Choose the intended readers and the least access they need before sharing a document.
Before You Share or Hand Over Your Screen
Separate showing a screen from allowing another person to control your device.
Encryption: A Locked Letter and Its Key
Understand how readable data becomes protected data and why the key matters.
Hashes: A Fingerprint for Data
Learn how a digest helps compare files and why a checksum needs a trusted reference.
Digital Signatures: Who Signed These Bytes?
Distinguish verifying a signature from hiding information or proving it is harmless.
Is My Saved Page Still Current?
Follow a browser checking a saved response before downloading it again.
A Transfer Should Finish Together
Use a fictional points transfer to understand committing and rolling back related changes.
Logs: What Happened, and What Is Still Unknown?
Read an event record without confusing an observation with proof of an attack.
Give Each Account Only the Keys It Needs
Connect access scope, task duration and review to a familiar workplace example.
How MFA Works
See why a stolen password is less useful when a second, independent factor protects the account.
Password Strength Explained
Understand why length, uniqueness and predictable choices matter more than a decorative symbol.
Password Managers Explained
Follow a password from generation to an encrypted vault and a legitimate sign-in page.
Authentication vs Authorization
Identity answers who is making a request. Authorization decides whether that identity may perform this action.
JWT Explained
Inspect the header, claims and signature of a token—and see why decoding is different from trusting.
OAuth Explained
Follow delegated access from a client to an authorization server without sharing the user’s password.
How DNS Works
Follow a domain name through a resolver, the DNS hierarchy and a cached answer.
HTTP and HTTPS Explained
Watch a browser send a request and receive a response, then place that exchange inside a protected channel.
How TLS Works
See how a client checks server identity and establishes keys for an encrypted connection.
How Phishing Works
Recognize the request behind the message and verify it through a channel you already trust.
How Fake Login Pages Work
Separate a page’s appearance from the domain that receives the information you enter.
Public WiFi Security
Understand what an untrusted network can observe and what HTTPS does—and does not—protect.
SIEM Explained
Follow a security event from collection through normalization, correlation and analyst investigation.
EDR Explained
Connect process, file and network activity on a device, then evaluate a response with context.
IOC vs TTP
Compare a specific observable with a pattern of behavior, and see why both need context.
MISP Explained
Follow an indicator through structured context, enrichment, correlation and a carefully scoped detection decision.
MISP Events, Attributes and Objects
Choose the right structure for an observation so that related values keep their meaning.
MISP Sharing, Sightings and Correlation
Separate who may receive intelligence from how it should be handled and what a match actually means.
MISP APIs and SOC Integration
Build a controlled intelligence pipeline that validates, selects and retires data instead of blindly importing everything.
MITRE ATT&CK Explained
Understand tactics, techniques and evidence, then explore a versioned map of observed adversary behavior.
How an Attack Progresses Through ATT&CK
Follow a fictional incident from entry to impact, switching between adversary intent and defender visibility.
OWASP Top 10 Overview
Explore the current web application risk categories and connect them with specific failures and defenses.
Security Misconfiguration
Understand security misconfiguration through a fictional failure, a defensive boundary and practical review questions.
Software Supply Chain Failures
Understand software supply chain failures through a fictional failure, a defensive boundary and practical review questions.
Cryptographic Failures
Understand cryptographic failures through a fictional failure, a defensive boundary and practical review questions.
Injection
Understand injection through a fictional failure, a defensive boundary and practical review questions.
Insecure Design
Understand insecure design through a fictional failure, a defensive boundary and practical review questions.
Authentication Failures
Understand authentication failures through a fictional failure, a defensive boundary and practical review questions.
Software or Data Integrity Failures
Understand software or data integrity failures through a fictional failure, a defensive boundary and practical review questions.
Security Logging and Alerting Failures
Understand security logging and alerting failures through a fictional failure, a defensive boundary and practical review questions.
Mishandling of Exceptional Conditions
Understand mishandling of exceptional conditions through a fictional failure, a defensive boundary and practical review questions.
From Your Browser to a Website
Meet clients, servers and networks before learning how they are secured.
Databases, Records and SQL Before Injection
Understand tables, queries and transactions before studying database attacks.
What Are We Protecting, and How?
Connect confidentiality, integrity, availability and layered controls to everyday examples.
Threat, Vulnerability and Risk
Explain a business concern using a concrete event, a weakness and a consequence.
Backups, Business Continuity, RTO and RPO
Separate restoring files from keeping an organization able to operate.
Vulnerability Assessment, Penetration Testing and Audit
Choose an assessment by the question it answers, not just its label.
Incident Response: From Report to Recovery
Learn how to contain harm, gather evidence and restore service with clear ownership.
Think Like an Analyst: Triage a Sign-in Alert
Work through fictional evidence, competing explanations and a justified next action.
Detection Coverage Is More Than an ATT&CK Label
Separate a mapped analytic from tested visibility and a working response.
Start a Cybersecurity Career by Building Evidence
Choose a direction, learn the underlying technology and practise safely with work you can explain.
Broken Access Control
Compare an allowed request, an ownership failure and a server-enforced denial in the same application.
SQL Injection
See what happens when data changes query structure, then separate the statement from its parameters.
Cross-Site Scripting
Follow untrusted text into a browser and compare interpreting markup with rendering plain text.
Server-Side Request Forgery
See how a user-controlled destination can make a server cross a network trust boundary.
API Security Fundamentals
Protect the identity, object, property, operation and resource cost behind every API request.
HTTP Status Codes
Read the server’s response as a useful signal, without mistaking a status code for the whole story.
How APIs Work
Follow a client request through a service contract to data and back to a response.
API Gateway Explained
Inspect the gateway’s routing and shared controls, then see which decisions still belong to the application.
Cookies and Sessions
See how an HTTP cookie can connect separate requests to server-side session state.
How Caching Works
Compare a cache hit with a miss, and see why freshness and cache keys are security decisions too.
How Message Queues Work
Follow a job from producer to consumer, then explore acknowledgement, retry and duplicate processing.