Tag: education sector
60 articles
UK School Faces Data Breach After Photographer's Vehicle Targeted
A break-in at a photographer's vehicle has led to a data breach at Priory School in Lewes, with a stolen camera bag containing SD memory cards that may hold sensitive student information, including names, class details, and photographs. The incident, which occurred overnight on October 6-7, has prompted the school to investigate and take action.
Third-Party Breach Exposes Frontline Education Data
A shocking data breach at Frontline Education exposed sensitive employee information, including Social Security numbers, after an unauthorized user exploited a vulnerability in third-party software used by the education-tech organization. The breach highlights the hidden risks of entrusting vendors with confidential data.
Bromcom Breach Exposes Email Addresses in Legacy Sign-on System
Bromcom's legacy single sign-on system has been breached, exposing email addresses and limited information of affected users. The incident, tied to a superseded registration functionality, has prompted the UK school software provider to withdraw the vulnerable component.
Bromcom Breach Exposes Email Addresses in Legacy Sign-on Flaw
A major security flaw in Bromcom's legacy single sign-on system has led to a significant data breach, exposing email addresses of users across the UK's education sector. The incident, identified on September 6, affected a legacy registration mechanism still in use despite being superseded.
UK Schools Bolster Cyber Recovery Amid Persistent Gaps
While it's heartening to see UK schools bouncing back faster from cyber breaches, the loss of coursework or marks can still cause significant disruption for students and erode staff confidence long after systems are restored.
DTU Breach Exposes Data of 200,000 Users
The Technical University of Denmark is investigating a serious data breach that may have compromised the personal info of 200,000 users, sparking concern and uncertainty for those affected. University Director Bjarke Bak Christensen expressed deep regret, saying it's a significant attack that's causing worry for those whose data may be at risk.
Frontline Education Breach Compromises Employee Data
Frontline Education recently discovered a vulnerability in a third-party software product that led to a data breach, compromising employee information. The company quickly sprang into action, investigating and remediating the issue with the help of a cybersecurity expert.
England's Schools Bolster Cyber Resilience
England's secondary schools are getting better at fending off cyber threats, with a significant drop in reported incidents - but the real test is in recovering quickly when attacks do happen. A recent Ofqual survey shows 27% of schools reported a cybersecurity incident in 2025/26, down from 34% in 2023/24.
Spokane Public Schools Hit by Network Security Breach
To prioritize safety, Spokane Public Schools swiftly took their online systems offline after detecting a network security breach, following established crisis protocols to assess the situation. The district is now working diligently to understand the scope of the incident and minimize its impact.
Australia's Research Sector Divided Over Security Reforms
As Australia's research sector navigates new national security reforms, a pressing question emerges: can freedom and vigilance coexist? The country's top universities are already feeling the impact, with recent terminations of high-profile partnerships sparking a heated debate.
AI Agents Fuel PaperCut Attacks at Scale
A suspected Russian-speaking actor has unleashed a massive assault on PaperCut MF/NG, compromising at least 440 instances with the help of hundreds of AI agents that supercharged exploit development, targeting, and post-exploit operations. The attacks hit the education sector hard, with victims in 48 countries, primarily in the US, UK, France, and other major nations.
Mathspace Breach Exposes Data of 1 Million People
A massive data breach at Mathspace has compromised the personal information of over 1 million students, school staff, and parents or guardians across Australia, New Zealand, the US, and the UK. The breach exposed sensitive data, leaving thousands of people vulnerable to potential identity theft and security risks.
Attackers Exploit PaperCut Flaws to Harvest Education Sector Credentials
Stolen logins from the education sector could give attackers a master key to unlock other critical systems, sparking serious concerns about widespread security breaches. Threat actors are exploiting PaperCut flaws to harvest credentials, creating a privileged pathway for further malicious activity.
US Targets 45% of Global RMM Phishing Campaign
The US has become the primary target of a massive global phishing campaign, accounting for nearly 45% of all observed activity, with education, technology, and government sectors being hit the hardest. This widespread operation, linked to 601 cases across 46 countries, has also prominently targeted banking, finance, and manufacturing industries.
Brazilian Schools Exposed to Cyberattacks via Weak Credentials, Outdated Systems
Brazilian schools are under cyberattack, with weak credentials and outdated systems leaving them vulnerable to hackers. New data reveals a hotbed of incidents in São Paulo, Rio de Janeiro, and Pernambuco, with private institutions bearing the brunt of high-severity ransomware attacks.
School IT Veteran Exposes Alarming Lack of Cybersecurity Basics
Imagine a cybercriminal stumbling upon a sticky note with a school's most sensitive login credentials - literally stuck to the bottom of the headteacher's laptop - and gaining instant access to pupils' personal info, emails, and confidential files. This shocking discovery highlights a glaring lack of basic cybersecurity practices in schools.
Ransomware Attacks Intensify Against Universities Worldwide
Universities worldwide are under siege by ransomware attacks, with a single group called The Gentlemen responsible for a staggering 80% of their attacks on the education sector, and a 275% surge in attacks on education in just the first half of 2026. This alarming trend has contributed to a spike in ransomware activity against universities, despite an overall decline in recorded incidents across the broader education sector.
Hackers Breach Mount Royal University, Expose Sensitive Data
Mount Royal University recently fell victim to a cyberattack that compromised sensitive data, with hackers accessing and stealing files from the university's network before deleting them. The breach, which occurred on June 17, has disrupted multiple university systems and may take weeks to fully recover from.
China-Aligned Hackers Exploit Roundcube Servers at US, Canada Universities
China-aligned hackers are targeting universities in the US and Canada, exploiting vulnerable Roundcube webmail servers to gain access to sensitive physics and engineering departments with potential national security links. This latest campaign highlights the ongoing threat of email-based attacks and the need for robust server security.
China-Aligned Hackers Exploit Roundcube Flaws to Infiltrate Universities
China-aligned hackers have launched a sneaky attack on universities, exploiting two flaws in the popular Roundcube webmail client to steal credentials and gain persistent access. At least a few dozen universities are believed to be affected, with Proofpoint researchers confirming fewer than 10 intrusions so far.
China-Aligned Hackers Exploit Roundcube Flaws at Universities
China-aligned hackers are exploiting vulnerabilities in Roundcube email servers to gain access to sensitive university networks, specifically targeting physics and engineering departments with national security ties. They've cleverly designed their attacks to fly under the radar, using tactics like compromised senders and spoofed domains to reach their targets.
UK School's Lax Network Security Exposes Sensitive Data
A 17-year-old student gained unrestricted access to a UK school's network, discovering sensitive leadership documents and being able to reset passwords, delete accounts, and even wipe the entire network. The alarming vulnerability was uncovered when the student connected their laptop to the school's Active Directory domain, which surprisingly required no administrator authentication.
India Warns Telegram Over Exam Leak Channels Before Nationwide Block
India's government took swift action against Telegram, warning the platform about exam leak channels just two weeks before blocking it nationwide, as a crucial medical school entrance exam approached. The move came after complaints of leaked NEET-UG 2026 material being shared on the platform.
ClickFix Campaigns Leverage New Loaders in Malware Delivery Push
Meet the BabaDeda Loader, a stealthy malware framework that's evolved to deliver a wider range of threats, including information stealers and remote access trojans, with alarming effectiveness. This revamped loader combines multiple evasion techniques to target vulnerable organizations, particularly in education and finance.