5 cyber threats facing the education sector

Student and school community data has been targeted by cyberattackers throughout the past years.

From the cyberattack on Albuquerque schools that closed facilities and the Chicago Public Schools data breach that compromised student and staff personally identifiable information (PII) to the permanent closure of Lincoln College after a combination of COVID-19 issues and a ransomware attack, school security leaders are facing a cyber threat landscape that has already caused operational damage to the sector.

The Threat Intelligence Report from Avertium analyzed Black Kite cybersecurity findings to determine cyber threats facing the education sector.

After identifying each of the top threats, the report suggested remedies designed for education IT and security leaders.

Ransomware: School security leaders can conduct tabletop exercises and encrypt institutional data to mitigate the effects of a ransomware attack.
Internet of Things (IoT) attacks: The report noted the importance of changing the default passwords on IoT devices used by the school, as well as implementing multi-factor authentication to inhibit malicious access attempts. Controlling network access to IoT devices may also help protect against attacks.
Phishing attacks and social engineering: Security training and tabletop exercises simulating a phishing or social engineering attack can help prepare employees and teach them to recognize signs of an attempted breach. Extending training to students further secures the network.
Data breaches: Backup school data regularly to limit the negative effects of a data breach. Impress upon the school community that human error is a top reason data breaches occur, according to the report.
Unpatched and outdated software: Updating software like attendance management systems, classroom tools and more can help safeguard important school data from threats. If a vulnerability is discovered in software used by the school, patching it prior to a breach can save time and costs.

For more information on these cyber threats to school environments, click here.

Madeline Lauver is the Editor in Chief of Security magazine. Lauver joined Security in 2021 as its Assistant Editor, and she covers news affecting enterprise security leaders, including physical security, cybersecurity, leadership and management, risk and resilience and more. Within her role at Security, Lauver focuses on news articles, web exclusives, features and several departments for Security’s monthly digital edition, as well as managing social media and multimedia content. Lauver graduated in 2019 with a B.A. in English, German and Media Studies from Kalamazoo College.

ON DEMAND: Business-impacting events such as severe weather, man-made disasters, and supply chain disruption are increasing in frequency and making impacts around the globe.

In today's rapidly evolving security landscape, organizations face an ever-growing array of disruptive events, security threats and risks. Traditional reactive approaches to security intelligence often leave businesses vulnerable and ill-prepared to anticipate and mitigate emerging threats that could impact the safety of their people, facilities or operations.