Before Learning Hacking, I Learned This: The Cybersecurity Fundamentals Every Beginner Should Know

When I first decided to pursue cybersecurity, I thought the journey would begin with hacking tools and exciting labs. Like many beginners, I wanted to jump straight into Kali Linux, Burp Suite, and Nmap. But as I started preparing for internships, I realized something important – companies don't expect freshers to know every tool. They expect them to understand the fundamentals.

In this blog, I'm sharing the core concepts that every aspiring cybersecurity intern should know before moving on to hands-on hacking.

Information Security vs Cybersecurity

Although these terms are often used interchangeably, they are not exactly the same.

Information Security (InfoSec) is about protecting information in any form – whether it's stored digitally, printed on paper, or even shared verbally. The focus is on keeping information secure from unauthorized access, modification, or loss.

Cybersecurity, on the other hand, focuses specifically on protecting digital systems such as computers, networks, applications, and data from cyber threats.

A simple way to remember this is:

All cybersecurity is information security, but not all information security is cybersecurity.

The CIA Triad: The Foundation of Security

Almost every security concept revolves around the CIA Triad.

Confidentiality ensures that only authorized people can access sensitive information. Techniques like encryption, passwords, and multi-factor authentication help achieve this.

Integrity ensures that data remains accurate and hasn't been altered without authorization. Hashing and digital signatures are commonly used to maintain integrity.

Availability ensures that systems and data are accessible whenever legitimate users need them. Backups, redundant servers, and disaster recovery plans all contribute to availability.

Think of an online banking application. Your account details should only be visible to you (Confidentiality), your balance should never change unexpectedly (Integrity), and the website should remain accessible whenever you need it (Availability).

Not Every Hacker Is a Criminal

The word "hacker" often creates a negative impression, but cybersecurity includes different types of hackers with different intentions.

White Hat Hackers are ethical professionals who legally identify vulnerabilities to improve security.
Black Hat Hackers exploit vulnerabilities for personal or financial gain.
Grey Hat Hackers operate without permission but usually don't intend to cause harm.
Script Kiddies rely on existing tools and exploits without fully understanding how they work.
State-Sponsored Hackers work on behalf of governments for espionage or national interests.
Hacktivists carry out cyberattacks to support political or social causes.

Understanding these categories helps us realize that cybersecurity isn't just about attacking systems – it's about understanding threats and defending against them.

My Biggest Takeaway

The more I learn, the more I realize that cybersecurity isn't about memorizing tools. It's about understanding how systems work, how attackers think, and how defenders can stay one step ahead.

These fundamentals may seem simple, but they form the base for everything that comes next – networking, Linux, web security, penetration testing, and security operations.

As I continue preparing for cybersecurity internships, I'll be documenting my learning journey through this blog series. My goal is not just to learn but to build a portfolio that reflects consistent growth and practical understanding.

If you're also starting your cybersecurity journey, I'd love to connect and learn together. See you in the next blog, where I'll explore another fundamental concept that every aspiring cybersecurity professional should know.

#CyberSecurity #InformationSecurity #EthicalHacking #CybersecurityInternship #LearningInPublic #Medium #SOC #VAPT #CybersecurityStudent