🎯Basically, schools and universities are facing a lot more cyber-attacks than before.
What Happened
According to a report by Quorum Cyber, educational institutions worldwide have seen a 63% increase in cyber-attacks over the past year. This alarming trend is attributed to various factors, including geopolitical tensions, the rise of ransomware, and hacktivism. The report, which analyzed threat intelligence data from FalconFeeds.io, covers incidents from November 2023 to October 2025.
The total number of recorded attacks jumped from 260 incidents in the previous year to 425 in the latest reporting period. Notably, data breaches rose by 73%, hacktivist activities increased by 75%, and ransomware incidents grew by 21%.
Who's Affected
The surge in attacks impacts schools and universities across 67 countries. Institutions are particularly vulnerable due to their open and collaborative nature, which makes them attractive targets for cybercriminals and nation-state actors seeking to steal valuable research materials.
What Data Was Exposed
The report highlights that universities are facing threats from various sources, including nation-state efforts and hacktivist-related attacks. These threats include DDoS attacks, data leaks, and defacement. Prominent threat actors include FunkSec, Cl0p, INC, and Nova, with infostealer malware and ransomware being persistent threats.
What You Should Do
Quorum Cyber recommends several mitigation measures for educational institutions to combat these rising threats: Ambrose Neville, head of information security at Queen Mary University of London, emphasizes the importance of security resilience. He notes that the challenge lies in balancing openness with security, as educational institutions cannot simply lock down their systems like other industries might. By understanding their vulnerabilities and responding quickly to threats, educational institutions can better protect themselves against the rising tide of cyber-attacks.
Do Now
- 1.Intelligence-led vulnerability management: Prioritize vulnerabilities based on up-to-date information.
- 2.Dark web monitoring: Monitor for leaked credentials and third-party breaches.
- 3.Robust backups: Maintain multiple copies of critical data across different devices, with one stored offline.
Do Next
- 4.Incident response exercises: Regularly conduct tabletop exercises to ensure preparedness.
- 5.Password management: Use strong, unique passwords stored in a password manager.
- 6.Social engineering policies: Implement helpdesk hardening, user awareness training, and phishing-resistant MFA.
🔒 Pro insight: The education sector's unique operational model makes it a prime target for cyber threats, necessitating a proactive security posture.
