Education and IT - Information Management Today

Pennsylvania State Education Association data breach impacts 500,000 individuals

Security Affairs

MARCH 20, 2025

A data breach at the Pennsylvania State Education Association exposed the personal information of over 500,000 individuals. The Pennsylvania State Education Association (PSEA) suffered a data breach that impacted 517,487 individuals. PSEA is affiliated with the National Education Association (NEA).

Education

Education Data breaches Passwords Insurance

Alabama State Department of Education suffered a data breach following a blocked attack

Security Affairs

JULY 7, 2024

Alabama’s education superintendent disclosed a data breach following a hacking attempt on the Alabama State Department of Education. The Alabama State Department of Education announced it had thwarted a ransomware attack on June 17, however, threat actors accessed some data and disrupted services before the attack was stopped.

Education

Education Data breaches Ransomware Access

Experts warn of a surge in NetSupport RAT attacks against education and government sectors

Security Affairs

NOVEMBER 21, 2023

Experts warn of a surge in NetSupport RAT attacks against education, government, and business services sectors. The most impacted sectors are education, government, and business services. NetSupport RAT is a remote control and desktop management software developed by NetSupport Ltd. implacavelvideos[.]com).

Education

Education Government Business Services Archiving

Webinars

Automation, Evolved: Your New Playbook For Smarter Knowledge Work

MORE WEBINARS

Colorado Department of Higher Education (CDHE) discloses data breach after ransomware attack

Security Affairs

AUGUST 6, 2023

The Colorado Department of Higher Education (CDHE) finally disclosed a data breach impacting students, past students, and teachers after the June attack. In June a ransomware attack hit the Colorado Department of Higher Education (CDHE), now the organization disclosed a data breach.

Education

Education Data breaches Ransomware Access

Bl00dy Ransomware Gang actively targets the education sector exploiting PaperCut RCE

Security Affairs

MAY 12, 2023

CISA and FBI warned of attacks conducted by the Bl00dy Ransomware Gang against the education sector in the country. The FBI and CISA issued a joint advisory warning that the Bl00dy Ransomware group is actively targeting the education sector by exploiting the PaperCut remote-code execution vulnerability CVE-2023-27350.

Education

Education Ransomware Encryption Communications

UK Cyber Security Council to Tackle Education, Standards

Data Breach Today

JUNE 5, 2021

Claudia Natanson Describes Vision of U.K.’s s New Self-Regulatory Body U.K. Cyber Security Council is a new self-regulatory body for the profession. It is tasked by the U.K. Government to execute their vision for the U.K.

Education

Education Security Government IT

China-linked APT Silk Typhoon targets IT Supply Chain

Security Affairs

MARCH 5, 2025

Silk Typhoon targets multiple sectors worldwide, including information technology (IT) services and infrastructure, remote monitoring and management (RMM) companies, managed service providers (MSPs) and affiliates, healthcare, legal services, higher education, defense, government, non-governmental organizations (NGOs), and energy.

Energy and Utilities

Energy and Utilities IT Cloud Passwords

Iran-linked group APT33 adds new Tickler malware to its arsenal

Security Affairs

AUGUST 28, 2024

The group continued to carry out password spray attacks targeting the educational sector for infrastructure procurement and focused on the satellite, government, and defense sectors for intelligence gathering. They also leveraged compromised accounts from educational institutions to create additional Azure tenants.

IT

IT Education File names Passwords

Save the Children confirms it was hit by cyber attack

Security Affairs

SEPTEMBER 12, 2023

Blackbaud is a cloud computing provider that serves the social good community — nonprofits, foundations, corporations, education institutions, healthcare organizations, religious organizations, and individual change agents. The charity organization Save the Children International revealed that it was hit by a cyber attack.

IT

IT Ransomware Education Data breaches

X will collect biometric data from its premium users

Security Affairs

SEPTEMBER 4, 2023

X also announced that it may collect and use your Job Applications / Recommendations (such as your employment history, educational history, employment preferences, skills and abilities, job search activity and engagement, and so on). Bloomberg first reported the news and confirmed that the change will only impact premium users.

IT

IT Privacy Education Government

CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 25, 2024

Microsoft has observed APT28 using GooseEgg in post-compromise activities against various targets, including government, non-governmental, education, and transportation sector organizations in Ukraine, Western Europe, and North America. CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog.

IT

IT Education Cybersecurity Risk

Russian Phobos ransomware operator faces cybercrime charges

Security Affairs

NOVEMBER 19, 2024

“According to the indictment, Ptitsyn facilitated the worldwide use of a dangerous ransomware strain to target corporations and various organizations, including government agencies, healthcare facilities, educational institutions, and critical infrastructure.

Ransomware

Ransomware Education Sales Government

Highline Public Schools school district suspended its activities following a cyberattack

Security Affairs

SEPTEMBER 11, 2024

Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Education) Two days ago Highline Public Schools (HPS), a school district in Washington state, suffered a cyber attack that caused a significant disruption of its activities. Central office will be open.”

IT

IT Ransomware Education Security

OpenAI and Common Sense Media launch free AI training for educators

Collaboration 2.0

NOVEMBER 20, 2024

This one-hour course helps teachers learn gen AI basics. Here's how to access it.

Education

Education Access IT

Storm-2372 used the device code phishing technique since August 2024

Security Affairs

FEBRUARY 16, 2025

Storm-2372s targets during this time have included government, non-governmental organizations (NGOs), information technology (IT) services and technology, defense, telecommunications, health, higher education, and energy/oil and gas in Europe, North America, Africa, and the Middle East.” ” continues the report.

Phishing

Phishing Authentication Access Government

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Security Affairs

DECEMBER 19, 2024

“While we found it to be popular with State, Local, and Education (SLED) and healthcare focused customers, luckily the internet exposure is fairly limited to around 15 instances.” The researcher also noticed that the vulnerability CVE-2023-34990 can be chained with CVE-2023-48782 (CVSS score of 8.8)

Authentication

Authentication Education Access IT

Port of Seattle ‘s August data breach impacted 90,000 people

Security Affairs

APRIL 5, 2025

The ransomware gang hit organizations in multiple industries, including education, healthcare, manufacturing, information technology, and government sectors. In September 2024, Port of Seattle confirmed that the Rhysida ransomware group was behind the cyberattack. The Rhysida ransomware group has been active since May 2023.

Data breaches

Data breaches Ransomware Manufacturing Education

Most Common Causes of Data Breach and How to Prevent It

Security Affairs

MAY 3, 2021

They must educate their employees about cybersecurity, social engineering, and phishing. Which are the most common causes of a Data Breach and how to prevent It? How can organizations prevent it? Data breaches are highly damaging and equally embarrassing for businesses and consumers. Consumers should be wary of their data as well.

Data breaches

Data breaches IT Phishing Passwords

China’s Volt Typhoon botnet has re-emerged

Security Affairs

NOVEMBER 13, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

e-Discovery

e-Discovery Communications Ransomware Government

Anthropic launches Claude for Education, an AI to help students think critically

Collaboration 2.0

APRIL 3, 2025

No, it won't just do their homework for them. Plus, it helps teachers create rubrics and provide feedback.

Education

Education IT

Vice Society ransomware gang adds the Italian City of Palermo to its data leak site

Security Affairs

JUNE 10, 2022

This group focuses on public school districts and other educational institutions, like other ransomware gangs it implements a double extortion model and publishes data stolen from the victims on a data leak site. In response to the security breach, the IT infrastructure of the city was shut down.

Ransomware

Ransomware IT Data breaches Education

OpenAI and Wharton launch free ChatGPT course for teachers. Here's how to access it

Collaboration 2.0

NOVEMBER 22, 2024

This course shows educators how they can benefit. ChatGPT can boost your productivity.

Access

Access Education IT

ChaChi, a GoLang Trojan used in ransomware attacks on US schools

Security Affairs

JUNE 24, 2021

The malware was recently employed in attacks against large US schools and education organizations. . “Healthcare and education organizations also host large volumes of sensitive data, making them more valuable targets. . Chashell is a reverse shell over DNS provider, while Chisel is a port-forwarding tool. ” . .”

Ransomware

Ransomware Education Cybersecurity Government

Wannacry, the hybrid malware that brought the world to its knees

Security Affairs

OCTOBER 31, 2022

Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security. Reflecting on the Wannacry ransomware attack, which is the lesson learnt e why most organizations are still ignoring it. The operating algorithm was RSA.

Computer and Electronics

Computer and Electronics e-Discovery IT Encryption

City of Dallas shut down IT services after ransomware attack

Security Affairs

MAY 4, 2023

The City of Dallas, Texas, was hit by a ransomware attack that forced it to shut down some of its IT systems. The IT systems at the City of Dallas, Texas, have been targeted by a ransomware attack. To prevent the threat from spreading within the network, the City has shut down the impacted IT systems. ” reported the website of Fox4News.

Ransomware

Ransomware IT Encryption Education

Cryptocurrencies and cybercrime: A critical intermingling

Security Affairs

APRIL 26, 2024

Educate and protect users and investors To effectively counter cybercrime, it is essential to understand the nature and techniques used by criminals. Prevention comes through educating users and taking robust security measures to protect their digital assets. Education improves awareness” is his slogan.

Education

Education Mining Encryption Cybersecurity

German IT provider Bitmarck hit by cyberattack

Security Affairs

MAY 1, 2023

Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections: The Teacher – Most Educational Blog The Entertainer – Most Entertaining Blog The Tech Whizz – Best Technical Blog Best Social Media Account to Follow (@securityaffairs) Please nominate Security Affairs as your favorite blog. “BITMARCK has identified a cyber attack.

Insurance

Insurance IT Data breaches Education

News alert: INE Security shares cyber hygiene guidance for small- and medium-sized businesses

The Last Watchdog

OCTOBER 23, 2024

INE Security , a leading provider of cybersecurity training and certifications, today shared its cybersecurity training for cyber hygiene practices for small businesses, underscoring the critical role of continuous education in safeguarding digital assets.

Security

Security Data breaches Passwords Cybersecurity

Grammarly's new tool aims to detect AI-generated text. Here's how it works

Collaboration 2.0

AUGUST 15, 2024

Though it will be available to any user, the new tool is targeted to the education market in particular. Grammarly Authorship will attempt to detect whether AI, a human, or a combination of the two created content.

Education

Education IT Marketing

Why Are There Fewer Women Than Men in Cybersecurity?

Data Breach Today

MARCH 15, 2024

How Society, Education and the Workplace Contribute to Underrepresentation The underrepresentation of women in cybersecurity is a complex issue. The reasons behind it include stereotypes and biases, educational barriers, workplace culture, and the lack of visibility and role models.

Cybersecurity

Cybersecurity Education IT

Report: Missouri Governor’s Office Responsible for Teacher Data Leak

Krebs on Security

FEBRUARY 22, 2022

Louis Post-Dispatch reporter Josh Renaud alerted Missouri education department officials that their website was exposing the Social Security numbers of more than 100,000 primary and secondary teachers in the state. Renaud found teachers’ SSNs were accessible in the HTML source code of some Missouri education department webpages.

Education

Education Access Security Communications

Grammarly to roll out a new AI content detector tool. Here's how it works

Collaboration 2.0

AUGUST 15, 2024

Though it will be available to any user, the new tool is targeted to the education market in particular. Grammarly Authorship will attempt to detect whether AI, a human, or a combination of the two created content.

Education

Education IT Marketing

Ransomware-Wielding Attackers Target Unfixed WS_FTP Servers

Data Breach Today

OCTOBER 13, 2023

Researcher Published Proof-of-Concept Exploit Code 1 Day After Vendor Issued Patch Ransomware-wielding attackers are targeting unpatched versions of FTP software that is widely used by large enterprises, including government and educational organizations.

Ransomware

Ransomware Education Government IT

BlueCharlie changes attack infrastructure in response to reports on its activity

Security Affairs

AUGUST 6, 2023

BlueCharlie primarily focuses operations on defense and intelligence consulting companies, non-governmental organizations (NGOs) and intergovernmental organizations (IGOs), think tanks, and higher education. Russia-linked APT group BlueCharlie was observed changing its infrastructure in response to recent reports on its activity.

IT

IT Phishing Authentication Education

A zero-day in Atlas VPN Linux Client leaks users’ IP address

Security Affairs

SEPTEMBER 6, 2023

A Reddit user with the handle ‘Educational-Map-8145’ published a proof of concept exploit for a zero-day flaw in the Linux client of Atlas VPN. ” reads the post published by ‘Educational-Map-8145’ “A malicious javascript on ANY website can therefore craft a request to that port and disconnect the VPN. .”

Education

Education Authentication Cybersecurity IT

FBI: Compromised US academic credentials available on various cybercrime forums

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. The FBI has observed incidents of stolen higher education credential information posted on publically accessible online forums or listed for sale on criminal marketplaces.

Sales

Sales Education Phishing Passwords

National Student Clearinghouse data breach impacted approximately 900 US schools

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. The security breach resulted from a cyber attack exploiting a vulnerability in the MOVEit managed file transfer (MFT).- reads the advisory published by the company.

Data breaches

Data breaches Education Ransomware Cybersecurity

CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

MAY 2, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added TP-Link, Apache, and Oracle vulnerabilities to its Known Exploited Vulnerabilities catalog.

IT

IT Cybersecurity Education Access

How Nvidia is helping upskill educators and prep students for the AI age

Collaboration 2.0

MARCH 10, 2025

The AI skills gap is real, but Nvidia's new program is focused on tackling it.

Education

Education IT

Quishing, an insidious threat to electric car owners

Security Affairs

SEPTEMBER 5, 2024

About the author: Salvatore Lombardo ( Twitter @Slvlombardo ) Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security. Education improves awareness” is his slogan. “That’s safe.

Phishing

Phishing Education Personal data Risk

Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting Security Vulnerability

Krebs on Security

OCTOBER 14, 2021

Louis Post-Dispatch ran a story about how its staff discovered and reported a security vulnerability in a Missouri state education website that exposed the Social Security numbers of 100,000 elementary and secondary teachers. On Wednesday, the St. In a press conference this morning, Missouri Gov. ” Missouri Gov. ” Missouri Gov.

Security

Security Education Computer and Electronics Access

Want to keep getting Windows 10 updates next year? Here's what it will cost

Collaboration 2.0

SEPTEMBER 10, 2024

For educators, the cost is just a few bucks. For businesses, a subscription for Windows 10 Extended Security Updates will be shockingly expensive. But what about consumers?

Education

Education IT Security

Rhysida ransomware gang claimed China Energy hack

Security Affairs

NOVEMBER 25, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. The Rhysida ransomware group claimed to have hacked the Chinese state-owned energy conglomerate China Energy Engineering Corporation. Energy China [link] TL;DR That's huuuge!

Ransomware

Ransomware Manufacturing Education Libraries

Hackers breached MDM firm Mobile Guardian and wiped thousands of devices

Security Affairs

AUGUST 6, 2024

The Ministry of Education (MOE) in Singapore confirmed that the incident heavily impacted students in the country. Hackers breached the mobile device management (MDM) firm Mobile Guardian, the company detected unauthorized access to iOS and ChromeOS devices on August 4th.

MDM

MDM Education Access Security

Pennsylvania State Education Association data breach impacts 500,000 individuals

Alabama State Department of Education suffered a data breach following a blocked attack

Webinars

Trending Sources

Experts warn of a surge in NetSupport RAT attacks against education and government sectors

Webinars

Colorado Department of Higher Education (CDHE) discloses data breach after ransomware attack

Bl00dy Ransomware Gang actively targets the education sector exploiting PaperCut RCE

UK Cyber Security Council to Tackle Education, Standards

China-linked APT Silk Typhoon targets IT Supply Chain

Iran-linked group APT33 adds new Tickler malware to its arsenal

Save the Children confirms it was hit by cyber attack

X will collect biometric data from its premium users

CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

Russian Phobos ransomware operator faces cybercrime charges

Highline Public Schools school district suspended its activities following a cyberattack

OpenAI and Common Sense Media launch free AI training for educators

Storm-2372 used the device code phishing technique since August 2024

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Port of Seattle ‘s August data breach impacted 90,000 people

Most Common Causes of Data Breach and How to Prevent It

China’s Volt Typhoon botnet has re-emerged

Anthropic launches Claude for Education, an AI to help students think critically

Vice Society ransomware gang adds the Italian City of Palermo to its data leak site

OpenAI and Wharton launch free ChatGPT course for teachers. Here's how to access it

ChaChi, a GoLang Trojan used in ransomware attacks on US schools

Wannacry, the hybrid malware that brought the world to its knees

City of Dallas shut down IT services after ransomware attack

Cryptocurrencies and cybercrime: A critical intermingling

German IT provider Bitmarck hit by cyberattack

News alert: INE Security shares cyber hygiene guidance for small- and medium-sized businesses

Grammarly's new tool aims to detect AI-generated text. Here's how it works

Why Are There Fewer Women Than Men in Cybersecurity?

Report: Missouri Governor’s Office Responsible for Teacher Data Leak

Grammarly to roll out a new AI content detector tool. Here's how it works

Ransomware-Wielding Attackers Target Unfixed WS_FTP Servers

BlueCharlie changes attack infrastructure in response to reports on its activity

A zero-day in Atlas VPN Linux Client leaks users’ IP address

FBI: Compromised US academic credentials available on various cybercrime forums

National Student Clearinghouse data breach impacted approximately 900 US schools

CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog

How Nvidia is helping upskill educators and prep students for the AI age

Quishing, an insidious threat to electric car owners

Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting Security Vulnerability

Want to keep getting Windows 10 updates next year? Here's what it will cost

Rhysida ransomware gang claimed China Energy hack

Hackers breached MDM firm Mobile Guardian and wiped thousands of devices

Stay Connected