for the culture – Page 3 – Matt Shannon, Security Pro

Dispatches From The Blue Ridge

The day began like the perfect hymn for the weekend. First light spilling over the ridgeline. Fog blowing across the mountains like they’re alive and breathing. The whole place is brought to life by the energy of the mountains, the wind, the sun, and the sky.

You can hear a waterfall in the distance, as steady as time itself.

Later, a violet sunset arrives as the last of the day’s light folds into the night.

Then, at nightfall, the only things that remain are the ghost stories and the million stars in the sky, like a thousand bridges of light overhead, leading some old, lost spirits home over the horizon.

Recovery Is Training Too

Fuel isn’t just for training — it’s for thinking, building, and recovering.

Athletes already know this truth: you don’t get stronger in the gym, you get stronger in recovery. Stress plus rest equals growth. Skip the rest, and all you get is breakdown.

In cybersecurity, it’s easy to forget this lesson. After long nights, incident responses, or big migrations, teams often jump straight into the next job. But recovery isn’t a luxury, it’s the bridge between surviving and improving. Without it, you just accumulate fatigue disguised as progress.

The Cost of Skipping Recovery

Burnout: tired minds make risky calls.
Missed lessons: incidents get fixed, but are never studied.
Fragility: systems stay brittle when they’re never given a chance to adapt.

Building Real Recovery

Post-incident reviews. Treat them like an athlete breaking down game tape, where the real learning happens.
Plan real downtime. Make sure everyone gets real rest after major efforts. Feeling worn out doesn’t show you care more; it’s a sign you need to pause.
Iterative improvement. Apply what you learned before running the next drill. Reflection without action is just rest, not improvement.

Fuel and Recovery: The Overlooked Half

Physical recovery doesn’t stop at rest. It’s also about what you put in your body.
Meal prep isn’t about looking good; it’s about making sure you can keep going. Drinking enough water, eating real food, and keeping your energy steady (and your blood levels in check) all week isn’t about following a trend. It’s about having the strength to do your job well.

You can’t think clearly or respond quickly if your system’s running on fumes. Whether you’re training or troubleshooting, energy is uptime.

A rule I’ve used for years: “We eat well today for optimal performance tomorrow.” That mindset changes how you plan your day, not just for food, but for everything else as well. Every decision contributes to tomorrow’s success.

When you build those habits, you stop depending on motivation to show up. Discipline becomes your safety net.

The Mindset Connection

In martial arts, you learn to reset between rounds. In strength training, deload weeks are built in by design. Cybersecurity should be no different. We don’t just patch systems; we maintain the people running them.

Recovery isn’t the end of work, it’s part of the work.

It’s where resilience grows.

Dispatches from The Blue Ridge

Out on the Daniel Boone Scout Trail

Progress Isn’t Linear, in Martial Arts or Cybersecurity

Progress isn’t linear. Martial artists learn this the hard way. One day you nail a three punch combo finished with a clavicle crushing elbow; the next, you stumble over the same movement combination you were hitting regularly just a couple days before. Some weeks, you level up quickly, while others days you’ll hit stumbling blocks. Always approach your wins and losses with the same humility.

Cybersecurity follows the same rhythm. Just as martial artists face setbacks, security professionals experience their own ups and downs. You patch systems, close vulnerabilities, and tighten configurations. Then a new zero-day vulnerability emerges, or an audit reveals previously unaddressed blind spots. It feels like sliding backward.

That slide isn’t a failure, it’s where progress truly forms.

The Myth of Linear Progress

We often imagine progress as, although slow, always moving upward. Reality is less predictable.

Perfection Bias
We assume improvement should always feel smooth. However, mastery, in both martial arts and cybersecurity, is a jagged path. The dips are where the depth develops.
The Comparison Trap
We see others’ highlight reels, the black belt breaking boards, or the company posting its “zero vulnerabilities” report, and mistake it for constant progress. Behind every clean result lies a mess of mistakes, patches, and failed tests.
Forgetting That Setbacks Build Strength
Regression often signals deeper adaptation in progress. In training, it’s when you refine mechanics. In security, it’s when you reinforce foundations.

Why Steps Back Matter

Plateaus and regressions aren’t detours; they’re checkpoints. They test persistence. Anyone can stay motivated when everything goes as planned; resilience forms when it doesn’t.

They reveal gaps in fundamentals. A failed pen test or misconfigured IAM or conditional access policy highlights what needs real attention. They build humility and precision. Overconfidence blinds; setbacks sharpen focus.

On the mats and in the SOC, mastery isn’t about avoiding mistakes, it’s about learning faster from them.

The Cybersecurity Parallel

You don’t know what you don’t know so every incident teaches you something you didn’t know you needed to learn. Every vulnerability scan reveals details you may have overlooked. It isn’t failure. It’s your system adapting, like a martial artist’s mind & body.

A martial artist doesn’t quit after a rough sparring session. They analyze what went wrong, refine their techniques, and return smarter & stronger. Security teams should do the same. A missed vulnerability isn’t a defeat; it’s a mirror. It can show you where your technique slipped & where to tighten your counter-offensive skills.

From the Mats to the Data Center

Both disciplines thrive on discipline, reflection, and repitition:

Training drills = Routine audits. Each repetition builds muscle memory for fighters and for security teams.

Pad work and shadow boxing = Playbooks and runbooks. Practicing in controlled settings builds confidence under pressure.

Sparring = Incident Response sims. You can’t simulate chaos perfectly, but you can train to be calm, and respond correctly, in chaos. That’s why you just keep training and doing reps over and over because each time your partner responds differently but you’re learning to respond with the correct technique every time.

Every repetition, every submission attempt, every punch, every kick, or incident response builds competence and confidence. Every CVE update, OWASP update or vulnerability scan creates visibility and awareness.

The Real Skill of a Black Belt: The Ability to Adapt and Overcome

In martial arts, the belt color doesn’t make you untouchable; it signifies you’ve learned and adapted more than others. In cybersecurity, it’s the same. The strongest organizations aren’t flawless; they’re mobile, agile and when necessary, hostile.

Adaptation beats perfection. Reflection beats reaction. Resilience beats your comfort zone. So the next time your scan lights up with new vulnerabilities or your red team exposes a blind spot, don’t get discouraged. It’s just another training session.

Final Thought

Progress, whether in close range combat or in your code, isn’t about avoiding setbacks. It’s about showing up again after them. The real win isn’t being unbreakable, it’s being unshakable.

Keep patching. Keep learning. Keep moving. Progress isn’t linear, but staying adaptive always drives you forward. Or, as it was once famously said, “Be water my friend.”

New Deadlift PR: 234kg/515lbs for a Double

Closed out the training block on a high note — pulled a new PR double at 234kg (515lbs). This cycle was all about fast-twitch development and explosive power, and it paid off on the bar.

The plan now: a short deload through the holidays, then hit the ground running January 1st with fresh momentum.

Takeaway: whether in the gym or in cybersecurity, progress comes from focused blocks, not random effort. You train a specific quality, test it, then recover and reset. Discipline > perfection, every time.

Wishing you all a Merry Christmas — and here’s to chasing your own PRs, wherever they are.

162 Hours on Udemy, Building the Foundation for a Career in Pentesting

When I first clicked “Enroll,” I didn’t know it would add up to 162 hours of training.
That’s almost a full month of time — stolen from late nights, weekends, and early mornings before work.

Like a lot of people breaking into cybersecurity, I started with curiosity and a mess of browser tabs. YouTube videos, Reddit threads, course recommendations. It’s easy to drown in the noise. What made the difference wasn’t just finding the right content, it was learning how to stay with it long enough for the dots to connect.

Udemy became my training ground. Not glamorous, not perfect, but consistent.
Over time, those 162 hours weren’t just “video time.” They became hours of repetition, frustration, and slow understanding.

There’s a phase in every learner’s path where you stop studying for a test and start thinking like the work.

That’s what those hours taught me, how to reason through a network like a puzzle, how to see the seams where systems and people meet, how to build patience in a field where curiosity is the only constant.

Looking back, those 162 hours weren’t just prep for certification. They were the price of entry, not into a career, but into a mindset.

Every scan that failed, every lab that wouldn’t load, every problem that took three days instead of three hours, they were all small rehearsals for the real work ahead.

And that’s the absolute truth about cybersecurity training: the time never feels fast, but it’s never wasted. You’re not just learning commands. You’re learning endurance. It’s the art of staying with a problem long enough to earn its answer.

The PenTest+ and the Long Game of Persistence

There’s a moment most people don’t talk about when they post their certifications, it’s that part where you stare at the screen, waiting for the result to load, rehearsing how you’ll feel either way.

That was me, after months of studying, rewrites, retakes, and nights when the last thing I wanted to see was another port, protocol, or payload.

I’d already passed the CompTIA trifecta, A+, Network+, Security+, and each one felt like a step forward. But PenTest+ was different. It wasn’t just about memorization. It forced me to think like an adversary, to build a structured approach out of controlled chaos. It was humbling.

There were setbacks. Long hours after long workdays. Missed weekends. That quiet voice that says, maybe this one’s just too much right now.

But that’s where persistence replaces motivation. I tell my students and training partners the same thing I remind myself: motivation gets you started, discipline keeps you moving.

When that “Pass” finally appeared on the screen, it wasn’t triumph, it was relief. And gratitude. Because every failed scan, every misconfigured lab, every late-night tracing network maps, they built the competence that makes the win real.

The truth is, no certification on its own changes who you are. The process does. The grind does. The decision to sit back down after the first, second, or third setback does.

In cybersecurity, as in martial arts, you don’t earn a belt to prove you’re done. You earn it because you’ve decided you’re not done yet.

And that lesson, more than any flag on a résumé, is what makes the next challenge possible.

The Top Nine Ways to Avoid Being Hacked: Essential Tips for Staying Safe Online

Cyber threats are everywhere. Learn nine expert-approved cybersecurity practices, from password hygiene to phishing prevention, that help protect your data, privacy, and peace of mind.

In today’s hyperconnected world, being hacked isn’t just a risk — it’s a near inevitability if you’re not prepared. Whether you’re an individual, a small business owner, or part of a larger organization, protecting your data should be a daily habit, not an afterthought.

Hackers exploit the smallest cracks: weak passwords, outdated software, and misplaced trust. The good news? A few consistent habits can make you a far harder target.

Here are nine proven ways to reduce your risk of being hacked, simple, practical, and backed by modern cybersecurity best practices.

Use Strong, Unique Passwords

Weak or reused passwords remain one of the top causes of account compromise.
A strong password should be:

At least 12 characters long
Include a mix of upper and lowercase letters, numbers, and symbols
Avoid personal details like your pet’s name or birthday

Pro Tip: Use a password manager to create and store unique credentials safely — it’s far more secure than your memory (or sticky notes).

2. Enable Multi-Factor Authentication (MFA)

If passwords are your front door, MFA is your deadbolt.
This simple tool requires an additional verification step — like a text message code or an authentication app prompt — before granting access.

Even if a hacker steals your password, MFA can stop them cold.
Enable it everywhere you can: email, banking, social media, and especially your work accounts.

Keep Software and Systems Updated

Cyber attackers love outdated software — it’s like an open window.
Enable automatic updates on your devices, browsers, and security tools to patch vulnerabilities before attackers can exploit them.

Updates aren’t annoyances; they’re armor.

4. Spot and Stop Phishing Scams

Phishing remains the #1 way users get hacked.
Attackers use fake emails or messages that mimic trusted sources to trick you into clicking malicious links or revealing credentials.

Stay sharp:

Check sender addresses carefully
Hover over links before clicking
Be skeptical of urgent or emotional language (“Your account will be suspended!”)
When in doubt, contact the organization directly

Education here pays off, once you’ve spotted a good phish, you’ll never unsee the patterns.

Secure Your Home Network

Your Wi-Fi router is the gateway to everything on your home network.
Change the default password immediately after setup.
Use WPA3 encryption (the most secure standard).
Disable WPS and consider hiding your SSID.
Set up a guest network to isolate visitors and IoT devices.

A few minutes of setup can close the door on thousands of automated attacks.

Use a Virtual Private Network (VPN)

When connecting to public Wi-Fi (airports, cafes, hotels) use a VPN to encrypt your internet traffic. This prevents hackers from intercepting data like login credentials and personal info.

Choose a reputable, paid VPN provider. (Free ones often collect your data instead of protecting it.)

7. Be Mindful of What You Share Online

Every social post is a breadcrumb. Hackers use personal details to guess passwords, craft phishing messages, or reset your accounts.

Limit what you share publicly, especially location check-ins and birthdates.
Remember: oversharing fuels social engineering — the human side of hacking.

Regularly Back Up Your Data

Ransomware doesn’t work if your data is safely backed up.
Use the 3-2-1 rule:

3 total copies of your data
2 different storage types (cloud + external drive)
1 kept offline

Automate backups and test them occasionally — a broken backup is no backup at all.

9. Educate Yourself and Your Circle

Technology changes fast — human habits change slowly. Stay updated on emerging threats, and share what you learn with coworkers, friends, or family.

Security awareness training and cybersecurity newsletters are excellent ongoing resources.

Cybersecurity is everyone’s job. The more we all understand, the safer we all become.

Final Thoughts

Avoiding being hacked isn’t about paranoia — it’s about preparation.
Each of these habits strengthens your security posture one layer at a time.

Think of cybersecurity as compound interest: small daily actions, multiplied over time, create unbreakable resilience.

Stay curious. Stay cautious. Stay secure.

*Updated October 2025: refreshed to reflect updated security practices for the modern threat landscapes.

Hypertrophy Phase for Building Strength in the High Bar Back Squat

Here’s a sample 8-Week Hypertrophy Phase for Building Strength in the High Bar Back Squat.
The high bar back squat is a foundational exercise for developing leg strength, power, and muscle hypertrophy. This 8-week hypertrophy program focuses on squatting twice a week, with an emphasis on high-repetition sets in the 15-20 rep range to stimulate muscle growth. Complementary accessory exercises, proper recovery, and nutrition are also crucial for maximizing gains during this phase.

Program Overview
The 8-week hypertrophy phase is divided into two 4-week blocks. Each block progressively increases the intensity and volume of your workouts to optimize muscle growth and strength. The program includes two squat sessions per week, supplemented with accessory exercises to target supporting muscle groups and ensure balanced development.

Week 1-4: Volume Accumulation

Focus: Build a foundation of muscle mass and muscle endurance.

Rep Range: 15-20 reps
Intensity: 50-60% of 1RM
Frequency: Twice per week

Week 5-8: Intensification

Focus: Increase intensity, maintaining high volume, and technical proficiency.

Rep Range: 12-15 reps
Intensity: 60-70% of 1RM
Frequency: Twice per week

Weekly Training Schedule

– Monday: High Bar Back Squat Focus

High Bar Back Squat: 4 sets of 15-20 reps
Romanian Deadlifts: 3 sets of 15-20 reps
Bulgarian Split Squats: 3 sets of 15-20 reps per leg
Front Foot Elevates Split Squat (FFESS): 3 sets of 20 reps – 10 per leg
Single leg, body weight calf raises: 3 sets of 20-25 reps

– Thursday: High Bar Back Squat Focus

High Bar Back Squat: 4 sets of 15-20 reps
Walking Lunges: 3 sets of 15-20 reps per leg
Front Squats: 3 sets of 10 reps at 40-50%
Frog Pumps: 3 sets of 15-20 reps
Tib Raises: 3 sets of 30 reps

Week 5-8 Adjustments

As you progress into the second block, increase the intensity by raising the weight and slightly lowering the rep range to 12-15 reps per set while maintaining the same structure and exercise selection.

Monday: High Bar Focus

High Bar Back Squat: 4 sets of 12-15 reps
Romanian Deadlifts: 3 sets of 12-15 reps
FFESS: 3 sets of 12-15 reps per leg
Reverse Hyper: 3 sets of 12-15 reps
Single leg, body weight calf raises: 3 sets of 15-20 reps

Thursday: High Bar Focus

High Bar Back Squat: 4 sets of 12-15 reps
Walking Lunges: 3 sets of 12-15 reps per leg
Front Squats: 3 sets of 10 reps at 40-50%
Frog Pumps: 3 sets of 15-20 reps
Tib Raises: 3 sets of 15-20 reps

Recovery and Nutrition: Prioritizing recovery and proper nutrition is crucial for maximizing gains during the hypertrophy phase:

Sleep: The NUMBER 1 thing you can fix to see increases in the gym — adequate rest and recovery! Aim for 7-9 hours of quality sleep each night to support muscle recovery and growth.

Nutrition:

Protein: Consume 1.6-2.2 grams of protein per kg of body weight daily to support muscle repair.

Carbohydrates: Ensure adequate carbohydrate intake to fuel workouts and replenish glycogen stores. Include complex carbs like whole grains, fruits, and vegetables.

Healthy Fats: Incorporate healthy fats from sources like avocados, nuts, seeds, and olive oil to support overall health and hormone production.

Hydration: Stay well-hydrated to maintain performance and facilitate recovery.

Active Recovery: Incorporate intensity work on such as MAP 10 training, walking, kayaking, yoga, or stretching on rest days to promote blood flow and reduce muscle soreness.

Monitoring Your Progress: Tracking your progress is essential for adjusting your program and ensuring continuous improvement:

Training Log: Record your workouts, including weights used, sets, reps, and any relevant notes on how you felt during each session.

Regular Testing: Periodically test your 1RM to gauge strength improvements and adjust training intensities accordingly. I’d suggest testing your 1RM every 3 to 4 months.

Adjustments: Based on your progress and recovery, modify variables such as intensity, volume, and exercise selection to avoid plateaus and continue making gains.

Final Thoughts:

An 8-week hypertrophy phase focused on the high bar back squat can significantly enhance your leg strength and muscle mass. By incorporating a structured training program that emphasizes high-repetition sets, prioritizing recovery and nutrition, and monitoring your progress, you can achieve substantial gains in your squat performance and overall strength. Stay consistent, maintain proper form, and adjust your program as needed to continue progressing towards your strength and hypertrophy goals.

Always remember, quality of reps over quantity of reps!

How To Program MAP 10 Aerobic Workouts

What are Map 10 Aerobic Workouts?

Map 10, which stands for Maximal Aerobic Power, simply means that work at this pace is very easy. As you move from MAP 10 to MAP 1, the pace increases as and the time of each interval drops in length.

Why do we love MAP 10 specifically?

It’s great for recovery!

The Story of OPEX Fitness and James FitzGerald | OPEX Fitness

MAP 10 Can Help You Recover from Soreness

A time tested and proven method that’s especially relevant to functional fitness athletes is mixing intense training with slow recovery sessions throughout the week. This style of training is often referred to as “High Low Method.”

OPEX Fitness calls the slow recovery style of aerobic work “MAP 10”. This is taught in the OPEX Coaching Certificate Program (CCP) because coaches must be able to prescribe a wide variety of training paces, dependent on their client’s needs. When programming different paces, coaches are also tapping into different energy systems. There are three main energy systems refer that we refer to as OPEX Gain, Pain, and Sustain:

(Coach’s Resource: Learn more about how to train specific energy systems in this free guide.)

Gain – this is scientifically referred to as the Anaerobic Alactic System. This system refers to very short, 1-20 seconds, bursts of energy at very high power, or “turnover.” Gain refers to you not being able to sustain your power output past that length of time because your muscles cannot continue to turn over fast enough
Pain – this is scientifically referred to as the Anaerobic Lactic System. This system refers to a longer interval time, 20 to 720 seconds, at higher power, or turnover. While the range is much longer, you’ll notice the word “Anaerobic” still remains in the name. That means that it isn’t aerobic which means that it isn’t sustainable. If you hold that higher power for those time periods, you will now “feel the burn” and you will recognize that you cannot hold that pace forever
Sustain – this is scientifically referred to as the aerobic system. This system refers to efforts that are sustainable. As you move from MAP 1 to MAP 10, your time frame gets even longer, and your power output goes down even more.

MAP 10 pace is on the far end requiring the most amount of time at the slowest pace with the least amount of power, therefore, falling under the Sustain “curve.” Whereas Gain begins with slow and low volume efforts in the beginning followed by a progression of faster, more voluminous efforts later. MAP 10 efforts should begin with longer efforts at a slower pace in the beginning (for most people). The reason MAP 10 needs to start with such long efforts is that you need to keep the pace easy. Very easy effort mixed with smaller amounts of eccentric muscle contractions is often interpreted as recovery by your body.

How to Program MAP 10 Aerobic Workouts

When programming MAP 10 you often want to begin with more aerobic – long easier efforts – work before you implement Gain work into your client/athlete’s fitness program because it builds your ability to do more work – volume – in your training.

To benefit greatly from MAP 10 – and easy aerobic work – make sure you minimize the eccentric load on your client. In the video, you will notice that Solange is doing carries (overhead, suitcase, etc…), Flywheel biking, versa climbing, Front Leaning Rest – FLR (plank) on the rings – etc…The lack of eccentric work allows her body to get better recovery than she would if she was pounding her body day in and day out in her “aerobic” work.

To pick great MAP 10 workouts, you want to pick easy, non-eccentric work and “go easy.” You don’t need to overthink this. You just need to move blood, find relaxation and rhythm, and be consistent in “going long.” People get scared of doing a 60-minute workout because they are going long and hard. MAP 10 is long and easy! To progress in this, you will add volume, but you would still get the pace nice and easy.

Programming MAP 10 Aerobic Workouts For Athletes

High-level athletes may have five morning sessions of 60-90 minutes of MAP 10 work + two “off” days of three sessions/day of 60-90 min of easy aerobic pieces. It will be all different styles of movement but do the math of that volume. They may have 8-12 hours of easy aerobic work each week on top of 3-4 hours per week of intense work.

When you are doing your easy aerobic work, don’t be afraid to go at conversational pace or listen to a podcast or read a book if you are on a machine that allows you to do that. We don’t recommend Deadmau5 for easy aerobic work unless you want to “wake up” 20 min into a row at 180 beats per minute heart rate. Also, don’t be afraid to just walk (in the sun if possible)

james fitzgerald crossfit for Sale,Up To OFF 66%

Next Steps

MAP 10 is just tapping into one of the body’s three energy systems. If you are looking to become a professional coach and develop your programming ability download our free guide Energy System Training, today.

For more information visit Opexfit.com today!