Sec Guy

CompTIA Security+ Full Course 2026 Sep 17, 2026 335 Welcome to the Sec Guy Channel and the start of your journey to becoming a cybersecurity professional! 🛡️ This is the first video in our comprehensive training series designed to help you pass the new CompTIA Security+ (SY0-701) exam.In this foundational video, "Exam Overview," we're breaking down everything you need to know before you start studying the core content. Understanding the exam logist

Mastering Security Controls: Preventive, Detective, & Corrective Sep 17, 2026 349 Firewalls aren't enough. To build a true defense-in-depth strategy, you need to understand the three pillars of security controls: Preventive, Detective, and Corrective. In this video, Sec Guy breaks down how these controls work together to secure your network, using real-world analogies to make the concepts stick for your exam and your career.[Exam Ready Route - FREE]Pass your certification for $

What is the CIA Triad? The Foundation of Cyber Security Sep 17, 2026 277 Confidentiality, Integrity, and Availability aren't just buzzwords—they are the backbone of every security strategy you will ever build. In this video, Sec Guy breaks down the "CIA Triad" with real-world examples (like hospital outages and bank hacks) to show you exactly how these three principles keep systems secure and why they are the first thing tested on your exam.[Exam Ready Route - FREE]Pas

Mastering Access Control: RBAC, MAC, DAC & The AAA Framework Sep 17, 2026 613 If you can't prove who you are, what you're allowed to do, and track what you did—you have no security. In this video, Sec Guy breaks down the AAA Framework (Authentication, Authorization, Accounting) and explains the critical differences between RBAC, MAC, and DAC that you must know for your exam and your career.[Exam Ready Route - FREE]Pass your certification for $0.✅ Training Videos & Pract

Zero Trust Architecture Explained (CompTIA Security+, CISSP, CEH, SecAI+, GIAC) Sep 17, 2026 700 "Trust but Verify" is a failed strategy. In today's cloud-native world, the only safe assumption is "Never Trust, Always Verify." In this deep dive, Sec Guy unpacks the NIST 800-207 Zero Trust Architecture, explains the critical difference between the Policy Decision Point (PDP) and Policy Enforcement Point (PEP), and shows you how to stop lateral movement dead in its tracks.🔥🔥New Security+ SYO-80

Physical Security in the AI Era Sep 17, 2026 445 We spend millions on firewalls, but if an insider can walk out the front door with your AI models in a backpack, your security program has failed. In this video, Sec Guy breaks down the Google AI theft case, explains why "Degaussing" destroys hard drives but fails on SSDs, and covers the critical exam concepts of CPTED, Man Traps, and Faraday Cages.🔥🔥New Security+ SYO-801 Study Guide Available tod

Hashing Explained - Digital Fingerprints & Data Integrity Sep 17, 2026 249 Hashing is NOT encryption—it's a one-way "meat grinder." In this video, Sec Guy explains the "Avalanche Effect," why MD5 and SHA-1 are dead, and how hackers use Rainbow Tables to crack unsalted passwords in milliseconds. If you don't understand the difference between a collision and a salt, you are not ready for your exam.🔥🔥New Security+ SYO-801 Study Guide Available today: secguy.org/security-stu

Encryption Explained: Symmetric vs. Asymmetric Sep 17, 2026 336 If you can't explain the difference between a "Private Key" and a "Public Key," you will fail your exam. In this video, Sec Guy breaks down the two main families of encryption, explains why we use Symmetric for speed (AES) and Asymmetric for security (RSA/ECC), and gives you the "23 BRAIDS" mnemonic to memorize every algorithm instantly.🔥🔥New Security+ SYO-801 Study Guide Available today: secguy.o

Security through Obscurity? Steganography & Obfuscation Explained Sep 17, 2026 228 "Security through Obscurity" is a delay tactic, not a defense strategy. In this video, Sec Guy explains why Obfuscation is different from Encryption, how hackers use Steganography to hide malware inside innocent JPEGs, and why Tokenization is the secret weapon for passing your PCI-DSS audits.🔥🔥New Security+ SYO-801 Study Guide Available today: secguy.org/security-study-guide 🔥🔥[Exam Ready Route -

Why Blockchain is Replacing Your Social Security Number Sep 17, 2026 190 Your Social Security Number is a password you can never change—and that is a security nightmare. In this video, Sec Guy explains why the future of identity isn't a static number in a database, but a cryptographic key in your wallet. We break down how Blockchain creates an immutable "Distributed Ledger" and how Self-Sovereign Identity (SSI) eliminates the single point of failure that hackers love.🔥

Digital Signatures Explained: Non-repudiation, Hashing, Private Keys Sep 17, 2026 190 A digital signature is NOT just an image of your name on a PDF. It is a mathematical proof that guarantees three things: Authentication, Integrity, and Non-Repudiation. In this video, Sec Guy explains the exact workflow of signing a document (Hash - Encrypt with Private Key) and why this process makes it legally impossible for a sender to say "It wasn't me."🔥🔥New Security+ SYO-801 Study Guide Avai

Threat Actors & Motivations Sep 17, 2026 286 If you don't know who is attacking you, you are just chasing ghosts. In this video, Sec Guy maps the adversary landscape—from highly funded Nation States (APTs) like Salt Typhoon to financially motivated Organized Crime groups like Scattered Spider. We also reveal why the "Insider Threat" and "Shadow IT" might be more dangerous to your organization than any elite foreign hacker.🔥🔥New Security+ SYO

Security+ Domain 1: Question Walkthrough Sep 17, 2026 478 Join Sec Guy for an in-depth review of Domain 1 for the CompTIA Security+ (SY0-701) exam. This 10-question practice test covers everything from security principles and controls to governance and threat actors. Perfect for on-the-go studying!🔥🔥New Security+ SYO-801 Study Guide Available today: secguy.org/security-study-guide 🔥🔥0:00: Introduction to Domain 1: General Security Concepts.0:06: Overview

Threat Vectors & Attack Surfaces Explained Sep 17, 2026 358 A "Threat Vector" is the path; an "Attack Surface" is the target. If you can't distinguish between a message-based attack (Smishing) and a file-based attack (Malicious Macro), you will lose points on your exam and miss threats in your SOC. In this video, Sec Guy maps out the 7 critical threat vectors you need to know, from Supply Chain compromises to Voice-based social engineering.🔥🔥New Security+

Infrastructure Attack Surfaces: Spectre, VM Escape, & Memory Mastery Sep 17, 2026 424 Software updates are great, but you can't patch a physics problem. In this video, Sec Guy explores the Infrastructure Attack Surface, explaining why Spectre and Meltdown exploit the CPU itself, how VM Escape can bring down an entire cloud provider, and the critical difference between a Buffer Overflow (Execution Attack) and a Memory Leak (Availability Attack).🔥🔥New Security+ SYO-801 Study Guide Av

Network Architecture: OSI Model, TCP/IP Model, PEP/PDP VLANS Explained Sep 17, 2026 352 If you can't map an attack to its layer, you can't defend against it. Is a DDoS attack Layer 4 or Layer 7? Is ARP Poisoning Layer 2 or Layer 3? In this video, Sec Guy breaks down the OSI Model vs. TCP/IP, explains the critical difference between the Policy Decision Point (PDP) and Policy Enforcement Point (PEP) in Zero Trust, and shows you how to stop VLAN Hopping attacks.🔥🔥New Security+ SYO-801 S

Modern Network Security: From Firewalls to Agentic AI Defense Sep 17, 2026 457 A firewall is no longer just a box—it's a policy enforcement engine. In this deep dive, Sec Guy explains why WAFs have evolved into WAAPs to stop API attacks, why VPNs are being replaced by ZTNA and SASE, and how to use "Sticky MAC" and 802.1X to lock down your physical ports. If you are prepping for Security+, CISSP, or CCSP, this is your masterclass in network defense.🔥🔥New Security+ SYO-801 Stu

Risk Management: BCP, DRP, RTO/RPO & Risk Math Sep 17, 2026 512 In cybersecurity, we don't plan for if—we plan for when. In this video, Sec Guy explains why the old "3-2-1 Backup Rule" is no longer enough to stop ransomware, how to calculate the cost of a disaster using SLE, ARO, and ALE, and the critical difference between a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP).🔥🔥New Security+ SYO-801 Study Guide Available today: secguy.org/securi

Identity Access Management: PAM, JIT, JEA, ABAC, SAML, OAuth Sep 17, 2026 356 In a cloud-native world, firewalls don't matter if your identity is compromised. "Identity is the New Perimeter." In this video, Sec Guy explains why Permanent Admin Rights are a security failure, how to implement Just-in-Time (JIT) access to stop attackers, and clearly defines the difference between SAML (XML/Enterprise), OAuth (Authorization), and OIDC (Authentication).🔥🔥New Security+ SYO-801 St

Cryptography: PKI & Certificates: CA, OSCP, CRL, TLS Sep 17, 2026 306 Encryption protects your data, but PKI protects your trust. If you don't understand how a Certificate Authority (CA) validates a server, or why OCSP Stapling is faster than a CRL, you don't understand how the internet works. In this video, Sec Guy breaks down the "Trust Anchor" model, explains the difference between the Root CA and Intermediate CA, and walks you through the modern TLS 1.3 Handshak

Incident Response: Forensics, Diamond Model, IOC, IOA Sep 17, 2026 354 You don't build an Incident Response plan during a breach. In this video, Sec Guy dissects the massive Salt Typhoon attack to show you how professional responders hunt advanced threats. We break down the Diamond Model of Intrusion Analysis, explain why Indicators of Attack (IOA) are more valuable than Indicators of Compromise (IOC), and walk through the Order of Volatility for capturing forensic e

Security Operations: SOC, SIEM, SOAR and UEBA Sep 17, 2026 313 A firewall blocks traffic, but a SOC finds the enemy already inside. In this video, Sec Guy breaks down the Tiered SOC Model (Analysts vs. Hunters), explains the critical math of Detection Engineering (Precision vs. Recall), and shows how UEBA uses Machine Learning to catch the "Insider Threat" that traditional rules miss.🔥🔥New Security+ SYO-801 Study Guide Available today: secguy.org/security-stu

Secure SDLC: DevSecOps, OWASP, SBOM, SAST, and BOLA Sep 17, 2026 251 In a cloud-native world, your code is your infrastructure. If the code is hollow, the fortress falls. In this video, Sec Guy breaks down the Secure SDLC, explains how to use STRIDE for Threat Modeling, and details the difference between SAST (Whitebox) and DAST (Blackbox) testing. We also tackle the #1 API threat: BOLA (Broken Object Level Authorization).🔥🔥New Security+ SYO-801 Study Guide Availab

Vulnerability Management: RBVM, EPSS, CISA KEV, CVSS, Asset Discovery Sep 17, 2026 335 A deep dive into the vulnerability lifecycle. We cover authenticated vs. agent-based scanning, the shift from CVSS severity to EPSS probability, and how to build a Risk-Based Vulnerability Management (RBVM) program.New Security+ SYO-801 Study Guide Available today: secguy.org/security-study-guideTimestamps:00:00 – Intro: The Maintenance of the Fortress01:15 – Asset Discovery: The "Step Zero"02:30

Penetration Testing: NMAP, Enumeration, Scanning, and Exploitation Sep 17, 2026 256 It isn't enough to know the phases; you have to master the mechanics. In this video, Sec Guy goes deep into the offensive toolkit. We move from Passive Reconnaissance to Active Scanning with Nmap and hping3, explain how to poison networks with Responder, and show you how to automate SQL Injection with SQLMap. If you are studying for CEH or PenTest+, this is your tactical field guide.New Security+

Social Engineering: Phishing, Vishing, and Smishing Sep 17, 2026 262 You don't need a zero-day exploit to hack a Fortune 500 company—you just need a phone and a story. In this video, Sec Guy breaks down the MGM Resorts Breach, explaining how attackers used Vishing to trick a help desk into resetting credentials. We also cover the rise of AI Deepfakes in CEO Fraud, why Tailgating works because of human courtesy, and how Business Email Compromise (BEC) stole $100M fr

Cloud Models: IaaS to Serverless, Shared Responsibility, and Soverignty Sep 17, 2026 372 If your data is breached in the cloud, is it Amazon's fault or yours? In this video, Sec Guy breaks down the Shared Responsibility Model, explaining why Capital One was liable for their massive breach (SSRF) despite using a secure cloud provider. We also cover the evolution from IaaS to Serverless (FaaS) and why Data Sovereignty (Microsoft Ireland Case) means your data is subject to the laws of th

Cloud Architecture Security: CSPM, CASB, Zero Trust Sep 17, 2026 279 If your cloud environment is a skyscraper, CSPM is the building inspector checking the foundation, while CASB is the security guard checking everyone who walks through the door. In this video, Sec Guy explains the critical difference between securing infrastructure (IaaS) and securing SaaS applications, breaks down Forward vs. Reverse Proxy deployment modes, and shows how a Zero Trust Policy Decis

Cloud IAM: STS, Roles, SCP, and Policies Sep 17, 2026 257 A password can be stolen, but a temporary token expires. In this video, Sec Guy explains why Long-Term Access Keys are a "security smell" and how to replace them with IAM Roles and the STS (Security Token Service). We break down the critical difference between Identity-Based Policies (What I can do) and Resource-Based Policies (Who can access this bucket), and show you how to use SCPs (Service Con

AI Threat Landscape: Model Poisoning and Prompt Injection Sep 17, 2026 397 When you type a password, the computer knows it's data. But when you talk to an AI, your instructions and your data are the exact same thing—just tokens in a stream. That single flaw is the root of every AI attack. In this video, Sec Guy explains the math behind Universal Adversarial Triggers, reveals how Indirect Prompt Injection can turn a resume into a weapon, and shows why Token Smuggling allo

CompTIA Security+ SY0-801: 2.3 Message, Image, Attachment, Browser, and Human Vectors Sep 17, 2026 319 When the network is breached, a technician reacts with panic, but an executive reacts with a playbook.In this module, Sec Guy breaks down Objective 4.7: Incident Response and Forensics. Using the Salt Typhoon telecommunications breach as a real-world framework, we cover the entire incident response lifecycle. You will learn how to build a Computer Incident Response Team (CIRT), execute tabletop ex

CompTIA Security+ SY0-801: 2.2 Threat Actors & Motivations Sep 17, 2026 666 In cybersecurity, knowing the exploit is only half the battle. If you do not know the hand behind the keyboard, you are just chasing ghosts.In this module, Sec Guy breaks down Objective 2.2 for the CompTIA Security+ (SY0-801) exam: Threat Actors and Motivations. We move beyond textbook definitions to analyze the actual tradecraft, funding, and motivations of modern adversaries. You will learn how

CompTIA Security+ SY0-801: 2.1 Threat Intelligence & Vulnerability Priority Sep 17, 2026 467 In enterprise security, you cannot defend against an adversary you do not understand. Today, we begin Domain 2 with Lesson S8-006: From Threat Intelligence to Vulnerability Priority for the CompTIA Security+ (SY0-801).Sec Guy breaks down the definitive difference between a threat (the force that exploits) and a vulnerability (the weakness in the system). You will learn how to consume intelligence

CompTIA Security+ SY0-801: Domain 1 Mastery Workshop Sep 17, 2026 623 Theory without execution is useless in enterprise cybersecurity. In this Domain 1 Mastery Workshop for the CompTIA Security+ (SY0-801), you step into the shoes of the Lead Security Architect for a national healthcare processing network facing a critical Friday morning crisis. When infrastructure engineers submit an emergency Change Advisory Board (CAB) request to overhaul the patient billing porta

CompTIA Security+ SY0-801: 1.3 Cryptographic Solutions & Trust Engine Sep 17, 2026 1165 In modern enterprise security, cryptography is not an academic math drill; it is the trust engine that enforces identity, proves integrity, and secures multi-cloud environments. In this module, Sec Guy breaks down Objective 1.3: Cryptographic Solutions and the Trust Engine for the CompTIA Security+ (SY0-801). We demystify the difference between one-way integrity (hashing, salting, and rainbow tab

CompTIA Security+ SY0-801: 1.2 Change Management Sep 17, 2026 702 Junior analysts picture major outages as the result of advanced nation-state hackers, but seasoned architects know that a single unvetted internal change can take down a multinational enterprise faster than any DDoS attack.In this module, Sec Guy breaks down Objective 1.2: Demonstrating the Impact of Change Management Processes on Security. Change management is not bureaucratic red tape; it is an

CompTIA Security+ SY0-801: 1.1 Security Concepts and Controls Sep 17, 2026 706 If you are preparing for your CompTIA Security+ SY0-801 certification, throw away the idea of memorizing vocabulary just to pass a test. In the real world, enterprise security is about reasoning through decisions, understanding architectural tradeoffs, and knowing exactly what happens when a control fails.In this module, Sec Guy breaks down Objective 1.1: Security Concepts and Controls. We dismant

CISM Full Course: Data Governance for CISOs Sep 17, 2026 251 You can build a million-dollar network fortress, but if you don't know where your most sensitive data lives, you have already lost. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down Data Governance. We cover the critical legal separation between Data Owners and Data Custodians, how to implement Data Loss Prevention (DLP), and why the CISO should never be the one decidin

CISM Full Course 2026: Managing C-Suite Conflict & Risk Acceptance Sep 17, 2026 237 You finally got the CISO job. You have the budget, you built the dashboard, and your S.O.C. is fully staffed. But there's one massive problem: You don't actually own the network. The CIO does. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down the brutal reality of boardroom politics. We cover "Influence Without Authority," how to navigate toxic friction between Engineer

CISM Full Course 2026: Cybersecurity Metrics: KRIs vs. KPIs vs. KGIs Sep 17, 2026 233 When the CEO asks, "Are we secure?", how do you answer? If you reply with technical metrics like "firewall hits" or "malware blocked," you are thinking like an engineer, not an executive. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down the science of measuring security success. We explain the critical difference between Key Risk Indicators (KRIs), Key Performance Indi

CISM Full Course 2026: Supply Chain & Third-Party Risk (The Procurement Lifecycle) Sep 17, 2026 249 You can build a million-dollar security fortress, but if your HVAC vendor has a weak password, your network is compromised. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down Supply Chain and Third-Party Risk Management (TPRM). We move beyond technical configurations and dive into the executive procurement lifecycle: R-F-Is, R-F-Ps, Proof of Concepts (POC), and why the "

CISM Full Course 2026: Incident Management: The Executive Playbook & Tabletop Exercises Sep 17, 2026 392 A security plan on paper is just a liability waiting to be exposed. In Video 6, we tackle the CISO's ultimate test: Incident Management. Discover the critical differences between an IRP, BCP, and DRP, why technicians fail during a crisis, and how top-tier executives maintain control, legally protect the company, and manage the boardroom narrative during a massive cyber breach.In this video, we cov

CISM Full Course 2026: Risk Management Engine: Capacity, Appetite, & Tolerance Sep 17, 2026 309 Stop trying to secure everything and start managing business risk. If you are still trying to patch every single vulnerability without looking at the business impact, you are thinking like a technician, not an executive.In Video 4 of the CISM 2026 series, we explore the core language of the boardroom: Risk Management. Learn how to stop saying "no" to the business and start saying "yes, securely."I

CISM Full Course 2026: Governance Engine: Frameworks, Standards, and Strategy Sep 17, 2026 428 Stop being a hero and start building a machine. If your security program depends on you saving the day, you don't have a program—you have a high-stress hobby.In Video 3 of the CISM 2026 series, we move from the "Mindset" to the "Executive Machine." We break down how top-tier CISOs use frameworks like NIST, ISO, and COBIT to build repeatable security engines that survive global audits and protect t

CISM Full Course 2026: Resource Management & Security ROI Sep 17, 2026 270 If you want to survive in the CISO chair, you have to stop speaking in vulnerabilities and start speaking in dollars. Here is the exact financial blueprint (CapEx, OpEx, and ROSI) to get your cybersecurity budget approved.Welcome back to the lab. In this module of the CISM/CISO series, Sec Guy breaks down the hardest transition for senior engineers: Resource Management. The Board of Directors does

CISM Full Course 2026: CISM Mindset Stop Doing, Start Managing Sep 17, 2026 313 We have seen the technical weeds. Now, let’s look at the boardroom. Welcome to Phase 1: The Executive Baseline. In this video, we switch to the C-Suite mindset.We are breaking down the "Business Alignment" stack, the fundamental shift in responsibility you need to know for the exam, and the critical separation of duties that keeps the organization secure without causing a bankruptcy.In this video,

SecAi+ Domain 4.1: AI CoE, Responsible AI, and AI RIsk Feb 2, 2026 231 From the server room to the boardroom: Mastering AI GRC for the SecAI+ Exam.This episode covers Domain 4: AI Governance, Risk, and Compliance. We explore the AI Center of Excellence (CoE), identify the Builders, Defenders, and Watchers on an AI team, and deep-dive into the dangers of Shadow AI. Learn the essential Responsible AI Principles—Fairness, Transparency, and Accountability—needed to pass

SecAI+ Domain 3.3: The AI Analyst (Blue Team Tools, MCP & Co-Pilot) Feb 2, 2026 224 We have seen the weapons (Video 10). Now, let’s look at the shields. Welcome to Domain 3: AI-Assisted Security. In this video (Objective 3.3), we switch to the Blue Team.We are breaking down the "AI Co-Pilot" stack, the new hardware you need to know for the exam, and the critical standard that connects AI to your internal data without causing a leak.In this video, we cover:The AI Co-Pilot: IDE vs.

SecAI+ Domain 3.1: The AI Analyst (Blue Team Tools, MCP & Co-Pilot) Feb 2, 2026 264 🛡️ Domain 3: AI-Assisted Security (Objective 3.1)We’ve analyzed the weapons in Domain 2—now it’s time to deploy the shields. Welcome to the Blue Team.In this video, we break down the "AI Co-Pilot" stack and the defensive tools you need to master for the SecAI+ exam. From the hardware powering Edge AI to the critical protocols that secure internal data, this is your crash course in AI-assisted d

Domain 3.2: The AI Offensive (Red Team, Deepfakes & Malware) Feb 2, 2026 297 We have talked about how to hack an AI. Now, let’s talk about when the AI becomes the hacker. Welcome to Domain 3: AI-Assisted Security. In this video (Objective 3.2), we switch to the Red Team.We are breaking down exactly how attackers weaponize LLMs to scale social engineering, clone voices for "Vishing," and generate polymorphic malware that evades traditional antivirus.In this video, we cover:

CompTIA SecAI+ Domain 2.5: Blue Team Defense & AI Guardrails Feb 2, 2026 261 Port 443 is always open, traffic is encrypted, and the attack looks like valid English. You cannot fix AI security with a traditional firewall.In this episode of the SecAI+ Course, we enter Domain 3: Blue Team Operations. We are building the "AI Shield"—the new defense stack required to protect Large Language Models from injection, sponge attacks, and data leakage.🔥 Topics Covered:* Input Validati

CompTIA SecAi+ Domain 2.4: Model Theft, Model DOS, Excessive Agency, Insecure Output Handling Feb 2, 2026 260 Master Prompt Injection & Jailbreaking for the CompTIA SecAI+ (Domain 2). In this lesson, we break down the most dangerous (and fun) part of AI Security: Input Attacks.Your firewall stops traffic. It does not stop words. 🛡️🚫OWASP LLM 1, 3, 5, 10 are covered previous video link here: https://youtu.be/d4zx2amlnvU In Part 2 of our Domain 2 Deep Dive, we cover the "Context Mixing" flaw that makes

CompTIA SecAI+ Domain 2.3: Model Inversion, Inference & Poisoning Feb 2, 2026 352 I don't need to break into your server to steal your AI. I just need to ask it the right questions. In Part 3 of our Domain 2 Deep Dive, we leave the "Prompt Injection" attacks behind and enter the world of Privacy Attacks and Model Theft.We explain how attackers can use Model Inversion to reconstruct private training data (like faces) just by analyzing confidence scores. We break down the differe

CompTIA SecAI+ Domain 2.2: Direct vs. Indirect Prompt Injection Feb 2, 2026 397 Your firewall stops traffic. It does not stop words. In Part 2 of our Domain 2 Deep Dive, we cover the most dangerous (and fun) part of AI Security: Input Attacks.We explain how attackers use "Prompt Injection" to turn helpful chatbots into "Confused Deputies" that attack their own users. We break down the difference between Jailbreaking (Roleplaying/DAN) and the mathematical magic of Universal Ad

CompTIA SecAI+ Domain 2.1: MITRE ATLAS & OWASP LLM Feb 2, 2026 324 SQL Injection won't save you when the database is a Vector Store. Welcome to Domain 2 of the CompTIA SecAI+ course. This domain makes up 40% of the entire exam, making it the most critical section to master.In this video, we map the new battlefield. We explain why traditional frameworks like MITRE ATT&CK fail against AI, and introduce the new standard: MITRE ATLAS. We also break down the OWASP

CompTIA SecAI+ Domain 1.3: Fine-Tuning, RLHF & Model Drift Explained Feb 2, 2026 350 AI models aren't born smart. We teach them. And that is where the security risk begins.In the Finale of Domain 1 for the CompTIA SecAI+, we cover the entire AI Lifecycle. Most organizations do not build models from scratch—they download them and "Fine-Tune" them. This video breaks down the massive Supply Chain risks involved in Transfer Learning and how attackers can poison the process before you

CompTIA SecAI+ Domain 1.2: Tokens, Embeddings & Vector Databases Explained Feb 2, 2026 390 Computers don't speak English. They speak Math. In Part 2 of our CompTIA SecAI+ Deep Dive, we break down the "Data Pipeline." If you want to secure an AI model, you first need to understand how it translates chaotic human language into structured mathematical vectors.This video covers the most abstract (and critical) technical concepts in Domain 1. We explain exactly how Tokenization works, the ma

CompTIA SecAI+ Domain 1: AI Fundamentals & Neural Networks Explained Jan 14, 2026 426 Master AI Fundamentals for the CompTIA SecAI+, Security+, CISSP, and CEH. In this lesson, we break down the "Artificial Brain"—from Neural Networks and Weights to the Transformer architecture that powers ChatGPT. Welcome back to the Sec Guy Channel and the next step on your journey to becoming a cybersecurity professional! 🛡️ While this is the absolute foundation for the CompTIA SecAI+ (Domain 1),

Ep 01: The SecAI+ Blueprint – AI Security, Exam Specs, & The Future of Defense Jan 14, 2026 308 The rules of cybersecurity have changed. Attackers are using generative AI to write polymorphic malware and craft uncatchable phishing emails. Defenders must learn to fight back at machine speed.In this inaugural episode of the Sec Guy Podcast, we kick off our full audio course for the CompTIA Security AI+ (SecAI+) certification. We break down exactly what this new exam covers, why it’s critical f

SecAI+ Domain 4.2: Compliance & Law Feb 2, 2026 252 The Final Objective: Mastering the Law and Frameworks for global AI compliance.In the finale of our SecAI+ course, we cover Objective 4.3: Compliance and Frameworks. We break down the EU AI Act's risk-based approach, the four core functions of the NIST AI RMF, and the critical ISO standards (42001, 23894, 22989) you need for the exam. Plus, learn about Data Sovereignty and how the OECD Principles

CompTIA 2026 Cert Refresh Deep Dive Jan 14, 2026 1215 Welcome back to the Sec Guy Channel – your go-to resource for IT and cybersecurity certifications! 🛡️ In this video, we’re doing a deep dive into the BIG changes CompTIA is rolling out in 2026, including: ✅ The brand-new Xpert Series certifications ✅ Crossover certs like SecAI+ for AI-driven security ✅ Updates to A+, Network+, and Security+ that reflect today’s tech trends If you’re planning to ge

Welcome to the Sec Guy Podcast: Your Cybersecurity Journey Starts Here Jan 14, 2026 88 Welcome to the inaugural episode of the Sec Guy Podcast!In a world full of noise, complex jargon, and gatekeeping, finding a clear path into the cybersecurity industry can be tough. This podcast is here to change that. Hosted by "The Sec Guy," a seasoned IT professional and veteran, this show is dedicated to breaking down complex security concepts into actionable, real-world advice.In this episode

Episodes

Recommended