Answer extracted from the Young and Profiting with Hala Taha (Entrepreneurship, Sales, Marketing) podcast — listen to the full episode below.
How did Abed Hamdan develop his expertise in cybersecurity and hacking from a teenage curiosity?
Abed Hamdan's journey began in the late 1990s and early 2000s through internet cafes and IRC chat rooms, where he discovered hacking as a self-taught pursuit. Inspired by the film 'Hackers' and the story of legendary hacker Kevin Mitnick, he learned Unix through experimentation in online communities—getting hacked multiple times in the process—and eventually adopted "Unix" as his online identity.
His path was far from linear. Rather than formal education, Hamdan's expertise grew through continuous hands-on exploration in chat rooms where like-minded enthusiasts gathered. The early internet provided a unique classroom: a space where curiosity could be tested against real systems, mistakes could be made, and lessons learned in real time.
The movie 'Hackers', featuring Angelina Jolie and highlighting the exploits of Kevin Mitnick, served as a powerful catalyst. These cultural touchstones showed Hamdan that hacking was not just a technical skill but a way of thinking. He began teaching himself by interacting with other hackers online, absorbing techniques and security concepts through peer learning rather than textbooks.
Even as he faced setbacks—being hacked multiple times during his learning phase—Hamdan used these failures as education rather than obstacles. This resilience and commitment to learning through real-world experience, as detailed in his discussion on the podcast, became the foundation of his career.
His formal education and early professional roles reinforced what he had already learned independently. Rather than shifting gears, his university years and first job simply extended the same learning trajectory he had begun in those IRC chat rooms. This combination of self-taught skill and professional experience over decades ultimately led him to found GRC Mastery and establish himself as a trusted cybersecurity consultant.
"They always target the vulnerable. They always target the young. It is a problem and we need some kind of a strict regulation."
Abed Hamdan — Founder of GRC Mastery, cybersecurity consultant with more than two decades of experience in cybersecurity and risk management. Known online as 'the Unix guy,' Hamdan started exploring hacking in the late 1990s through IRC chat rooms and eventually built unixsky.com, which predates Google.com by a few months. He now advises organizations across multiple sectors, from beverage companies in Australia to global enterprises, on cybersecurity strategy and risk assessment.
What's worth exploring further: Hamdan discusses the specific tactics that hackers use today to target businesses of all sizes, and why rapid scaling without proper security controls creates vulnerability that he sees "way too easy" to exploit.
From Internet Cafes to Decades of Expertise
The transition from teenage curiosity to professional mastery happened gradually. Hamdan's two decades-plus career in cybersecurity reflects a continuous chain of learning that never stopped after those early IRC room discoveries. His path shows that deep expertise in security isn't built overnight through formal programs alone—it requires sustained engagement with real problems and real systems.
His online presence under the Unix identity became a marker of that consistency. A fuller picture of how he applies these decades of learning to today's business challenges is covered in the episode—including practical advice for entrepreneurs protecting their organizations on limited budgets.
See also
What additional professional measures should small business owners take beyond basic technical security controls?
Get professional cybersecurity consultation from a local firm, similar to how businesses hire solicitors to review contracts. This does not require a large budget and can protect your organization effectively.
What is the principle of least privilege in access management and how should it be applied to business resources?
The principle of least privilege, part of identity and access management, means restricting access to resources like applications or intellectual property to only what employees need to perform their role.
What are the non-negotiable cybersecurity measures that small business owners should prioritize with limited budgets?
Two-factor authentication should be rolled out to every single platform and every user without exception, as it significantly reduces cyber attack risk and is foundational to any security strategy.