Course · Intro

How cybersecurity works

How attacks actually work and how the defences hold — from passwords and phishing to encryption, two-factor, and spotting a scam — so you can stay safe online with judgement instead of fear.

Most people picture hacking as a genius cracking code in the dark. The reality is quieter and more human: attackers rarely break in — they log in, using a stolen password, a convincing lie, or a trust no one checked. This course teaches the system from first principles: what 'secure' really means, how attacks actually work, and why the defences that hold are layered, not a single wall. By the end you can read a security claim, spot a scam, and protect yourself with calm instead of fear. Principles, not this month's threats.

What you'll be able to do

See what 'secure' really means — and why proving who you are is the whole game.
Understand how attacks actually work — stolen logins, phishing, malware, and fake connections.
Know why the real defences hold — encryption, HTTPS, two-factor, and layered security.
Judge a security claim or message for yourself — and decode it as Sound, Shaky, or Oversold.

Module 1 — What "secure" even means

The three promises

Explain what security actually protects — that data stays secret, true, and available.

Proving who you are

Explain how a system checks you are who you claim to be — the three factors.

Why passwords are the weak link

Explain why most passwords fail, and what actually makes one strong.

Module 2 — How attacks actually work

Attackers don't break in — they log in

Explain why most breaches use stolen trust, not cracked code.

The con, not the code

Explain how attackers trick people, and the tells that give a lure away.

Malware, demystified

Explain the main things malicious software does, and how it usually gets in.

Trusting the wrong line

Explain how an attacker can sit between you and a site, and why that is dangerous.

Module 3 — How we actually defend

Scrambling secrets

Explain how encryption keeps data secret even when it is stolen.

The padlock in the address bar

Explain how your browser checks it is really talking to the real site.

The second key

Explain why a second factor stops most attacks even after a password leaks.

Layers and blast radius

Explain why security is layers, and why limiting access contains a breach.

Module 4 — Living in it

The patch race

Explain why unpatched software is an open door, and why timing matters.

Capstone: reading a security claim

Judge a security claim or message as Sound, Shaky, or Oversold.