Marianne Kolbasuk McGee reports: Tens of thousands of documents containing personal information of special education students within New York City’s public school system were held in an unsecured database exposed to the internet. Researcher Jeremiah Fowler of security services firm Security Discovery told Information Security Media Group he found the unsecured database in mid-February and…
Search Results for: education
Schools are ‘target rich’ for cyberattacks, fed agency helps fight back
Kayla J. Dunn reports: Schools have a lot of information — and not just the educational kind. Social security numbers, addresses, staff members’ banking information, the list goes on. That data is stored digitally, and schools are increasingly a prime target for cybercriminals seeking to steal the sensitive information. […] A 2022 report on cybersecurity attacks in…
Wilkes-Barre Career and Technical Center averts catastrophe from cyberattack
They could have headlined this story as “Good security practices pay off.” Michael P. Buffer reports: A cyber attack on a server at the Wilkes-Barre Career and Technical Center was discovered Wednesday, and antivirus and backup procedures “prevented a catastrophe” and “a lot of problems,” Administrative Director Anthony C. Guariglia said Thursday. The regional vo-tech…
Bits ‘n Pieces (Trozos y Piezas)
CL: BlackCat confirms attack on Fonasa DataBreaches recently reported a malware attack on Chile’s National Health Fund (FONASA). There is an update to report: In a chat on Tox, BlackCat confirmed to DataBreaches that they are responsible for the attack and they say that they will announce it soon on their leaks page. A spokesperson…
Israel publicly blames Iran for cyberattack on major university last month
Times of Israel reports: The Israel National Cyber Directorate announced Tuesday that a group affiliated with Iranian intelligence was behind an internet attack last month on the Technion, a top Israeli research and education institute. In a statement, the directorate said an investigation found the attack was carried out by a group known as MuddyWater,…
CISA Advisory: Royal Ransomware
Release Date: March 02, 2023 Alert Code: AA23-061A SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations…