cyber-security: add hands-on exercises to nine topics

[DmitriyKozyatinskiy]

Adds one @course@ link to nine cyber-security topics that currently have only articles and videos, so a learner can practise the concept instead of only reading about it. Every link opens a browser-based exercise with no account, email, or payment, and every topic stays well under the eight-link cap.

Topic	Links before	Added
Phishing	4	Work a suspicious email in a simulated inbox: sender spoofing, link targets, urgency cues
Social Engineering	2	Take a pretext phone call and practise holding a verification procedure under pressure
MFA / 2FA	2	MFA fatigue attack: repeated push prompts plus a fake help-desk nudge
OWASP Top 10 and Web-Based Attacks	3	Exploit-then-fix labs for each OWASP Top 10 category
Compliance	2	GDPR and EU AI Act exercises: lawful bases, DSARs, breach response, AI literacy
Malware Analysis and Types	0 (no resources block yet)	The first minutes of a ransomware infection, decision by decision
Cloud Security Concepts	3	Public buckets, over-permissive IAM, instance metadata abuse, container escapes
Dumpster Diving	3	Bin a restricted HR printout, then read it back from the skip; what disposal should have looked like
Shoulder Surfing	3	Leave a desk with the screen unlocked and a password on a note, then see who used it

The Malware topic had no "Visit the following resources" block, so this adds one in the standard format. Links are placed in the type order from contributing.md (after articles, before videos).

Disclosure: I work on RansomLeak, which hosts these exercises. They are free for individual learners with no sign-up, so they fit the "genuinely adds value" bar rather than a promotional link to a landing page. Happy to trim to fewer topics if you would rather start smaller.