The National Security Cyber Centre (NCSC) is offering free cyber security training for schools in an effort to confront a recent rise in the number of attacks against the sector.
The training package is a scripted powerpoint presentation that offers school staff four steps for building basic cyber security safeguards, including how to defend against phishing attempts, the effective use of passwords, and how to properly secure devices.
The powerpoint presentation can be downloaded from the NCSC website and covers topics like the actors behind cyber attacks, cyber threats from outside or inside schools and provides statistics on school cyber resilience. It is designed to be accessible by any staff member, regardless of their technical knowledge, and once it has been completed they can download a certificate.
The training also covers a number of real-life case studies, and references the 'have i been pwned' database, which alerts users when their details have been published online by hackers.
The move follows last month's updated alert from the NCSC, which warned of a “significant increase” in the number of ransomware attacks against educational institutions, many of which lack the resources to invest in cyber security.
“It is vital that schools have robust cyber security in place, and these new resources and training will help staff to increase protection from attacks,” said Schools Minister Nick Gibb.
Just last month, a ransomware attack forced the Harris Federation to temporarily disable access to its central email system and network-attached devices, leaving 37,000 students across 50 primary and secondary academies throughout London unable to access their coursework or messages.
It's thought the ransomware gang REvil was behind the cyber attack, after the trust's financial records were published on a dark web forum known to be associated with the group.
At the beginning of March, 15 schools across Nottinghamshire also had to shut down their IT networks after the Nova Education Trust was hit by a cyber attack. Schools were unable to access emails or their websites and were not able to conduct lessons remotely.
Attacks against universities are also on the rise - an attack on the University of Hertfordshire last week knocked its entire IT network offline, blocking access to each one of its cloud-based services. This included its Wi-Fi network, student record portal, and email system for both staff and students. Online teaching was also cancelled as a result.
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
