📢 It's important to be prepared for when a cyber incident happens to you.  Part of that preparation should include having a Cyber Incident Response Plan, and part of that plan should include how to communicate, who does the communication and what they should say.

We are sharing some of blog posts by school ICT technicians and ICT managers that are giving their advice about keeping your school cyber secure and resilient.

The recent news has been full of the global IT outage that affected many systems over the weekend, including airlines and patient access.  Although the incident was not caused by a cyber attack, it is important to note that it was a cyber incident which affects everyone.

A cyber incident is an event with threatens the confidentiality, integrity or availability of information systems, networks or the information they contain.

Review our previous article: What's a Cyber

Plans for the new government to introduce legislation for cyber security, digital and data were outlined in the King's speech on 17 July 2024.

This article discusses what a cyber incident is and what you should do if you experience one.  The important thing to note is that this isn't a full-blown cyber attack, but you should still go through various reporting and risk management processes.

Regular cyber training for staff is crucial given the amount of systems involved in running organisations.  Schools and Trusts should be doing this annually as advised by the DfE Cyber Security Digital Standards.

NHS Dumfries and Galloway has confirmed some children’s mental health data has been published by criminals following a cyber attack.    

A cyber incident review is a process or analysis undertaken after a cyber security incident or cyber attack has occurred.  It involves analysing the event in detail to understand what happened, why it happened and how it can be prevented in the future.

During February there have been a number of attacks reported on Universities in the UK.  There were reports of hackers attacking the universities of Cambridge, Manchester and Wolverhampton.  Systems were affected at all sites.  The disruption is the latest reported attack by Anonymous Sudan.  It is thought the attacks are related to the UK's support of Israel in the Gaza conflict.

The ICO has confirmed a data breach from Kent councils.  The breach was reported by three Kent councils who share the same IT support provider.  Canterbury, Dover and Thanet councils continue to be hampered by the disruptions of onlines services following a cyber incident.

The City of London Police is warning schools across the UK to be vigilant against phishing attacks targeting school networks. Multiple schools have reported receiving suspicious emails containing malicious attachments that have infected their networks with malware.

Once infected, the school's email systems are used to send malicious attachments to other schools.

You don't have a pdf plugin, but you can download the pdf file.


Help and Advice against Phi

We have previously reported how the Rhysida Ransomware has focused on attacking the education sector.  Recently the CISA, FBI and MS-ISAC have released a new joint Cyber Security Advisory to disseminate known Rhysida ransomware indicators of compromise, detection methods, tactics, techniques and procedures identified through recent investigations.