Security courses

Browse public Security courses with structured lessons, visuals, and practice on Wondering.

• AI Systems for Modern Marketers

  Master practical AI tools, agents, and strategies to supercharge your content workflows, scale growth safely, and thrive as an AI-native marketer. * **Deploying autonomous AI agents** for multi-channel marketing campaigns * **Directing multimodal AI tools** to produce high-impact brand content * **Grounding AI models** in your proprietary brand context reliably * **Applying local models safely** to safeguard sensitive customer data

• CDN for Engineers: Beyond Static Caching

  Understand how CDNs actually work in production — edge caching, origin offload, invalidation, edge security, and dynamic content acceleration — so you can reason about CDN configuration and debug edge-related issues with confidence.

• Securing Software Development Lifecycles

  Integrate rigorous defensive research into your engineering workflow to architect resilient systems. This course bridges high-level security theory with practical, production-grade implementation across the entire pipeline. * **Architecting resilient CI/CD pipelines** through automated security integration * **Implementing advanced threat modeling** for complex distributed systems * **Governing supply chain security** via rigorous dependency analysis * **Enforcing shift-left security** with custom automated policy enforcement

• Penetration Testing for Azure DevOps

  Bridge your expertise in traditional testing and Azure DevOps by mastering cloud-native security audits and automating robust defense mechanisms directly within your CI/CD pipelines. * **Securing CI/CD pipelines** against unauthorized code injection * **Automating security testing** within automated deployment workflows * **Cloud-native security audits** for Azure infrastructure and services * **Exploiting misconfigurations** in DevOps permissions and access controls

• HTTP Protocol Internals & Offensive Semantics

  Train an experienced web/API pentester and bug bounty hunter to predict vulnerabilities that arise when two components interpret the same HTTP message differently. Assume fluency with HTTP requests, Burp Suite, common web vulnerabilities, TLS, proxies, APIs and web architecture, and never re-explain them. Use RFC 9110 as the semantic backbone, then RFC 9111, 9112, 9113, 9114, 9204, 9213, 9421, 9530, 9651, 7239 and 6265. Every lesson must state the precise protocol mechanic, distinguish normative HTTP behaviour from implementation behaviour, connect it to real infrastructure (CDN, WAF, load balancer, reverse proxy, API gateway, framework, application), and answer: what could two parsers disagree about here? Show raw request and response bytes rather than describing them. Name real implementations whose behaviour differs. End every lesson with a concrete test the reader can run against a live target and the observable that decides the result. Label claims as established, inferred, or controversial. No fluff, no filler, no generic web-security advice.

• Evaluating AI Biotech Legal Risks

  Master the legal complexities of AI-driven drug discovery to protect your investments and navigate evolving intellectual property frameworks when partnering with biotech innovators. * **Identify AI-generated patentability** and inventorship hurdles * **Analyze liability risks** in AI-driven drug discovery models * **Audit data privacy compliance** for biological datasets * **Assess IP strength** for biotech investment due diligence

• Real-Time Ad Event Pipelines: Lessons from Netflix

  Understand how to design scalable event enrichment pipelines using streaming joins, choose the right delivery guarantee per layer, and safely migrate a revenue-critical production system without downtime

• Blockchain Essentials for Financial Investigators

  Master the art of tracing illicit digital assets by applying your existing investigative logic to the world of cryptocurrency through simple, non-technical analogies. * **Trace illicit fund flows** across public blockchain ledgers * **Identify key entities** by analyzing wallet addresses and patterns * **Master crypto terminology** through simple non-technical investigative analogies * **Document digital evidence** for academic research and legal proceedings

• Autonomous Agent Security Incidents

  Learn how the reported OpenAI–Hugging Face incident unfolded, why coordinated AI agents changed the security dynamics, and what defenders should do about fully automated offense.

• Using AI Safely at Work

  What happens to what you paste, how a document can hijack a model, whose assumptions you inherit, when you have to disclose, and what the rules actually require.

• Can a document I upload hijack the AI?

  Prompt injection. Recognise an injection attempt, and name which of your own AI setups could actually act on one.

• Is what I paste being used to train it?

  Where your data goes. Determine, for the specific tool you actually use, whether your inputs are retained or trained on, and state the boundary for what you paste.

• It's acting on its own. Where do I put the brakes?

  Agents, tools, and checkpoints. Read an agent's step trace and place human checkpoints where a mistake would be expensive or irreversible.