Connect with us

Spread & Containment

K-12 schools need to take cyberattacks more seriously

America’s public schools often lack the adequate security to protect their students’ most sensitive data from being linked on the web.

Published

3 years ago

on

Cyberattacks against America's K-12 schools are on the rise. janiecbros via iStock / Getty Images Plus

Teachers in Baltimore County Public Schools knew something was wrong late in the day on Nov. 24 when they began to experience trouble entering grades into the school district’s computer system. Around the same time, the video for a meeting of the district’s school board abruptly cut off.

Both situations were the result of a cyberattack that had hit all of the school district’s computer networks, disrupting online classes for 115,000 students.

The episode was by no means isolated.

Rather, it was just one of several in an uptick of ransomware attacks in which cybercriminals have targeted public schools throughout the United States – from Hartford, Connecticut, to Huntsville, Alabama – since the 2020-21 school year began.

Federal cybersecurity officials say the attacks – which involve things that range from the theft of sensitive student data to the disruption of online classes – are expected to continue.

As a researcher who specializes in cybercrime and cybersecurity, I know that public schools represent easy and attractive targets for cybercriminals.

Attacks have doubled

This vulnerability is in part due to the fact that most schools spend very little on cybersecurity, despite the fact that they need to perform a large amount of file sharing on their networks. They also may be likely to comply with cyberextortionists’ demands because taxpayers and parents expect them to restore networks quickly.

Cyberattacks may not be completely avoidable, but there are steps school system leaders can take to reduce the likelihood that the attacks occur or that sensitive student data is stolen and leaked onto the dark web, as was the case in Fairfax County, Virginia, in October. But first, let’s take a look at the scale and scope of the problem and how dramatically ransomware attacks increased between spring and fall of 2020, both in the United States and globally.

From March until mid-November, cybercriminals attacked U.S. school districts educating over 700,000 students. In the U.S., public K-12 schools represented about 28% of all reported ransomware incidents from January to July. That figure more than doubled, to 57%, for August and September, when K-12 schools began the fall semester.

In Europe from July through August, the number of weekly cyberattacks against the education sector increased by 24%, compared with 9% for all sectors. During that same period, weekly cyberattacks targeting the education sector in Asia increased by 21%, compared with 3.5% against all industries.

Weak security

Compared with most organizations and workplaces, public schools are less prepared to defend themselves against cyberattacks.

For instance, in Baltimore County, a state government report indicated that the school system’s network lacked adequate security and had failed to properly safeguard sensitive personal information.

Typically, public schools have small IT teams. Some have technology leaders with no formal training in technology.

Public schools also lack proper data backup and recovery systems and procedures.

Given the large number of users, school networks have many vulnerable points of entry and face higher risks of malware infection and transmission. Students might also use devices with outdated software, and their home networks might be insecure. If one student’s device is attacked, that may be used as an entry point to attack the entire school network.

For instance, the criminals may send malicious email attachments to other users of the network using the student’s credential. Most K-12 students lack cybersecurity training, which includes how to spot malicious links or infectious attachments.

Two girls look shocked and disappointed while they stare at a computer screen.
Cybercriminals use phishing tactics to access students’ confidential information. AntonioGuillem via iStock/Getty Images Plus

Extortion tactics

Public schools are under pressure to ensure that students have access to online learning opportunities during the COVID-19 pandemic. The pressure to quickly restore networks is especially acute after the school year starts. Cybercriminals are taking advantage of this situation

After penetrating a school network, the perpetrators seek to gain privileged access and identify critical systems. They then gather large numbers of account credentials, such as usernames, passwords and other items used to validate identity for authentication. They may also steal other sensitive data, try to destroy backups and disable security processes.

According to the antivirus company Emsisoft, after ransomware perpetrators compromise a network, they stay in the network for an average of 56 days before they deploy ransomware.

Ransomware attacks against K-12 schools dramatically increased when the 2020 school year started. The number of universities, colleges and school districts facing ransomware attacks increased from eight during the second quarter of 2020 to 31 during the third quarter.

Sensitive personal data is also involved in such attacks. In nine of the 31 ransomware incidents victimizing U.S. schools in the third quarter of 2020, the perpetrators had stolen personal data. The five most active ransomware groups targeting K-12 schools – Ryuk, Maze, Nefilim, AKO and Sodinokibi/REvil – run leak sites to “dump” personal data if victim schools refuse to pay.

In September, ransomware gang Maze attacked Ohio’s Toledo Public Schools and published personal data of faculty, staff and students online. Personal data posted on the dark web included students’ and employees’ Social Security numbers and dates of birth. The criminals also disclosed information related to students’ exam grades, disciplinary action and disability status. The identities of an eighth grader whom the school had listed as emotionally disturbed and a ninth grader suspended for sexual activity were revealed. A list of foster children was also published.

Children’s data are highly valuable

Among the most serious concerns in ransomware attacks against schools is that leaked children’s data is likely to be sold in the dark web. Even before ransomware attacks started, children were 51 times more likely to be targeted for identity theft than adults.

Some identity thieves specifically target children because the children may not find out that they were victimized until decades later after applying for credit.

The unique value of children’s Social Security numbers also stems from the fact that they lack a credit history and can be combined with any name and birth date.

What can schools do?

School leaders should develop clear guidelines and policies to strengthen cybersecurity. Regular updates about phishing and other threats, as well as strategies and instructions to mitigate and manage such threats, must be provided to students and staff.

Schools can also use free services to enhance cyberdefense. Of the 13,000 school districts in the U.S., only 2,000 are taking advantage of free membership in the Multi-State Information Sharing & Analysis Center. The center offers network vulnerability assessments, cyberthreat alerts and other services, such as Malicious Domain Blocking and Reporting, which prevents computer systems from connecting to malicious websites. Only about 120 schools use the blocking service.

Many school districts rely on outdated equipment and software, which are easy to hack. It is important to patch operating systems and software when manufacturers release new updates. It also helps to constantly back up important data. By frequently backing up data and keeping it secure, schools can ensure the access to networks without disruption.

Schools may also want to purchase cyberinsurance to defend against ransomware and other cyberthreats. Insurance not only helps pay ransom, but it also helps to defend against attacks, because schools need to strengthen their security to get a lower premium. When online education company K12 Inc., which creates online learning curricula for over 1 million students, faced ransomware attacks in November, the company worked with its cyberinsurer to make the ransom payment.

[Deep knowledge, daily. Sign up for The Conversation’s newsletter.]

Nir Kshetri does not work for, consult, own shares in or receive funding from any company or organisation that would benefit from this article, and has disclosed no relevant affiliations beyond their academic appointment.

Read More

Related Topics:

Continue Reading

Spread & Containment

Harvard Medical School Professor Was Fired Over Not Getting COVID Vaccine

Harvard Medical School Professor Was Fired Over Not Getting COVID Vaccine

Authored by Zachary Stieber via The Epoch Times (emphasis ours),

A…

Published

1 day ago

on

March 16, 2024

By

Harvard Medical School Professor Was Fired Over Not Getting COVID Vaccine

Authored by Zachary Stieber via The Epoch Times (emphasis ours),

A Harvard Medical School professor who refused to get a COVID-19 vaccine has been terminated, according to documents reviewed by The Epoch Times.

Martin Kulldorff, epidemiologist and statistician, at his home in Ashford, Conn., on Feb. 11, 2022. (Samira Bouaou/The Epoch Times)

Martin Kulldorff, an epidemiologist, was fired by Mass General Brigham in November 2021 over noncompliance with the hospital’s COVID-19 vaccine mandate after his requests for exemptions from the mandate were denied, according to one document. Mr. Kulldorff was also placed on leave by Harvard Medical School (HMS) because his appointment as professor of medicine there “depends upon” holding a position at the hospital, another document stated.

Mr. Kulldorff asked HMS in late 2023 how he could return to his position and was told he was being fired.

“You would need to hold an eligible appointment with a Harvard-affiliated institution for your HMS academic appointment to continue,” Dr. Grace Huang, dean for faculty affairs, told the epidemiologist and biostatistician.

She said the lack of an appointment, combined with college rules that cap leaves of absence at two years, meant he was being terminated.

Mr. Kulldorff disclosed the firing for the first time this month.

“While I can’t comment on the specifics due to employment confidentiality protections that preclude us from doing so, I can confirm that his employment agreement was terminated November 10, 2021,” a spokesperson for Brigham and Women’s Hospital told The Epoch Times via email.

Mass General Brigham granted just 234 exemption requests out of 2,402 received, according to court filings in an ongoing case that alleges discrimination.

The hospital said previously, “We received a number of exemption requests, and each request was carefully considered by a knowledgeable team of reviewers.”

“A lot of other people received exemptions, but I did not,” Mr. Kulldorff told The Epoch Times.

Mr. Kulldorff was originally hired by HMS but switched departments in 2015 to work at the Department of Medicine at Brigham and Women’s Hospital, which is part of Mass General Brigham and affiliated with HMS.

“Harvard Medical School has affiliation agreements with several Boston hospitals which it neither owns nor operationally controls,” an HMS spokesperson told The Epoch Times in an email. “Hospital-based faculty, such as Mr. Kulldorff, are employed by one of the affiliates, not by HMS, and require an active hospital appointment to maintain an academic appointment at Harvard Medical School.”

HMS confirmed that some faculty, who are tenured or on the tenure track, do not require hospital appointments.

Natural Immunity

Before the COVID-19 vaccines became available, Mr. Kulldorff contracted COVID-19. He was hospitalized but eventually recovered.

That gave him a form of protection known as natural immunity. According to a number of studies, including papers from the U.S. Centers for Disease Control and Prevention, natural immunity is better than the protection bestowed by vaccines.

Other studies have found that people with natural immunity face a higher risk of problems after vaccination.

Mr. Kulldorff expressed his concerns about receiving a vaccine in his request for a medical exemption, pointing out a lack of data for vaccinating people who suffer from the same issue he does.

“I already had superior infection-acquired immunity; and it was risky to vaccinate me without proper efficacy and safety studies on patients with my type of immune deficiency,” Mr. Kulldorff wrote in an essay.

In his request for a religious exemption, he highlighted an Israel study that was among the first to compare protection after infection to protection after vaccination. Researchers found that the vaccinated had less protection than the naturally immune.

“Having had COVID disease, I have stronger longer lasting immunity than those vaccinated (Gazit et al). Lacking scientific rationale, vaccine mandates are religious dogma, and I request a religious exemption from COVID vaccination,” he wrote.

Both requests were denied.

Mr. Kulldorff is still unvaccinated.

“I had COVID. I had it badly. So I have infection-acquired immunity. So I don’t need the vaccine,” he told The Epoch Times.

Dissenting Voice

Mr. Kulldorff has been a prominent dissenting voice during the COVID-19 pandemic, countering messaging from the government and many doctors that the COVID-19 vaccines were needed, regardless of prior infection.

He spoke out in an op-ed in April 2021, for instance, against requiring people to provide proof of vaccination to attend shows, go to school, and visit restaurants.

“The idea that everybody needs to be vaccinated is as scientifically baseless as the idea that nobody does. Covid vaccines are essential for older, high-risk people and their caretakers and advisable for many others. But those who’ve been infected are already immune,” he wrote at the time.

Mr. Kulldorff later co-authored the Great Barrington Declaration, which called for focused protection of people at high risk while removing restrictions for younger, healthy people.

Harsh restrictions such as school closures “will cause irreparable damage” if not lifted, the declaration stated.

The declaration drew criticism from Dr. Anthony Fauci, head of the National Institute of Allergy and Infectious Diseases, and Dr. Rochelle Walensky, who became the head of the CDC, among others.

In a competing document, Dr. Walensky and others said that “relying upon immunity from natural infections for COVID-19 is flawed” and that “uncontrolled transmission in younger people risks significant morbidity(3) and mortality across the whole population.”

“Those who are pushing these vaccine mandates and vaccine passports—vaccine fanatics, I would call them—to me they have done much more damage during this one year than the anti-vaxxers have done in two decades,” Mr. Kulldorff later said in an EpochTV interview. “I would even say that these vaccine fanatics, they are the biggest anti-vaxxers that we have right now. They’re doing so much more damage to vaccine confidence than anybody else.”

Surveys indicate that people have less trust now in the CDC and other health institutions than before the pandemic, and data from the CDC and elsewhere show that fewer people are receiving the new COVID-19 vaccines and other shots.

Support

The disclosure that Mr. Kulldorff was fired drew criticism of Harvard and support for Mr. Kulldorff.

The termination “is a massive and incomprehensible injustice,” Dr. Aaron Kheriaty, an ethics expert who was fired from the University of California–Irvine School of Medicine for not getting a COVID-19 vaccine because he had natural immunity, said on X.

“The academy is full of people who declined vaccines—mostly with dubious exemptions—and yet Harvard fires the one professor who happens to speak out against government policies.” Dr. Vinay Prasad, an epidemiologist at the University of California–San Francisco, wrote in a blog post. “It looks like Harvard has weaponized its policies and selectively enforces them.”

A petition to reinstate Mr. Kulldorff has garnered more than 1,800 signatures.

Some other doctors said the decision to let Mr. Kulldorff go was correct.

“Actions have consequence,” Dr. Alastair McAlpine, a Canadian doctor, wrote on X. He said Mr. Kulldorff had “publicly undermine[d] public health.”

Tyler Durden Sat, 03/16/2024 - 21:00

Read More

Continue Reading

International

“Extreme Events”: US Cancer Deaths Spiked In 2021 And 2022 In “Large Excess Over Trend”

"Extreme Events": US Cancer Deaths Spiked In 2021 And 2022 In "Large Excess Over Trend"

Cancer deaths in the United States spiked in 2021…

Published

1 day ago

on

March 16, 2024

By

"Extreme Events": US Cancer Deaths Spiked In 2021 And 2022 In "Large Excess Over Trend"

Cancer deaths in the United States spiked in 2021 and 2022 among 15-44 year-olds "in large excess over trend," marking jumps of 5.6% and 7.9% respectively vs. a rise of 1.7% in 2020, according to a new preprint study from deep-dive research firm, Phinance Technologies.

Algeria, Carlos et. al "US -Death Trends for Neoplasms ICD codes: C00-D48, Ages 15-44", ResearchGate, March. 2024 P. 7

Extreme Events

The report, which relies on data from the CDC, paints a troubling picture.

"We show a rise in excess mortality from neoplasms reported as underlying cause of death, which started in 2020 (1.7%) and accelerated substantially in 2021 (5.6%) and 2022 (7.9%). The increase in excess mortality in both 2021 (Z-score of 11.8) and 2022 (Z-score of 16.5) are highly statistically significant (extreme events)," according to the authors.

That said, co-author, David Wiseman, PhD (who has 86 publications to his name), leaves the cause an open question - suggesting it could either be a "novel phenomenon," Covid-19, or the Covid-19 vaccine.

"The results indicate that from 2021 a novel phenomenon leading to increased neoplasm deaths appears to be present in individuals aged 15 to 44 in the US," reads the report.

The authors suggest that the cause may be the result of "an unexpected rise in the incidence of rapidly growing fatal cancers," and/or "a reduction in survival in existing cancer cases."

They also address the possibility that "access to utilization of cancer screening and treatment" may be a factor - the notion that pandemic-era lockdowns resulted in fewer visits to the doctor. Also noted is that "Cancers tend to be slowly-developing diseases with remarkably stable death rates and only small variations over time," which makes "any temporal association between a possible explanatory factor (such as COVID-19, the novel COVID-19 vaccines, or other factor(s)) difficult to establish."

That said, a ZeroHedge review of the CDC data reveals that it does not provide information on duration of illness prior to death - so while it's not mentioned in the preprint, it can't rule out so-called 'turbo cancers' - reportedly rapidly developing cancers, the existence of which has been largely anecdotal (and widely refuted by the usual suspects).

While the Phinance report is extremely careful not to draw conclusions, researcher "Ethical Skeptic" kicked the barn door open in a Thursday post on X - showing a strong correlation between "cancer incidence & mortality" coinciding with the rollout of the Covid mRNA vaccine.

Phinance principal Ed Dowd commented on the post, noting that "Cancer is suddenly an accelerating growth industry!"

Continued:

Bottom line - hard data is showing alarming trends, which the CDC and other agencies have a requirement to explore and answer truthfully - and people are asking #WhereIsTheCDC.

We aren't holding our breath.

Wiseman, meanwhile, points out that Pfizer and several other companies are making "significant investments in cancer drugs, post COVID."

Phinance

We've featured several of Phinance's self-funded deep dives into pandemic data that nobody else is doing. If you'd like to support them, click here.

 

Tyler Durden Sat, 03/16/2024 - 16:55

Read More

Continue Reading

Government

“I Can’t Even Save”: Americans Are Getting Absolutely Crushed Under Enormous Debt Load

"I Can’t Even Save": Americans Are Getting Absolutely Crushed Under Enormous Debt Load

While Joe Biden insists that Americans are doing great…

Published

2 days ago

on

March 15, 2024

By

"I Can't Even Save": Americans Are Getting Absolutely Crushed Under Enormous Debt Load

While Joe Biden insists that Americans are doing great - suggesting in his State of the Union Address last week that "our economy is the envy of the world," Americans are being absolutely crushed by inflation (which the Biden admin blames on 'shrinkflation' and 'corporate greed'), and of course - crippling debt.

The signs are obvious. Last week we noted that banks' charge-offs are accelerating, and are now above pre-pandemic levels.

...and leading this increase are credit card loans - with delinquencies that haven't been this high since Q3 2011.

On top of that, while credit cards and nonfarm, nonresidential commercial real estate loans drove the quarterly increase in the noncurrent rate, residential mortgages drove the quarterly increase in the share of loans 30-89 days past due.

And while Biden and crew can spin all they want, an average of polls from RealClear Politics shows that just 40% of people approve of Biden's handling of the economy.

Crushed

On Friday, Bloomberg dug deeper into the effects of Biden's "envious" economy on Americans - specifically, how massive debt loads (credit cards and auto loans especially) are absolutely crushing people.

Two years after the Federal Reserve began hiking interest rates to tame prices, delinquency rates on credit cards and auto loans are the highest in more than a decade. For the first time on record, interest payments on those and other non-mortgage debts are as big a financial burden for US households as mortgage interest payments.

According to the report, this presents a difficult reality for millions of consumers who drive the US economy - "The era of high borrowing costs — however necessary to slow price increases — has a sting of its own that many families may feel for years to come, especially the ones that haven’t locked in cheap home loans."

The Fed, meanwhile, doesn't appear poised to cut rates until later this year.

According to a February paper from IMF and Harvard, the recent high cost of borrowing - something which isn't reflected in inflation figures, is at the heart of lackluster consumer sentiment despite inflation having moderated and a job market which has recovered (thanks to job gains almost entirely enjoyed by immigrants).

In short, the debt burden has made life under President Biden a constant struggle throughout America.

"I’m making the most money I've ever made, and I’m still living paycheck to paycheck," 40-year-old Denver resident Nikki Cimino told Bloomberg. Cimino is carrying a monthly mortgage of $1,650, and has $4,000 in credit card debt following a 2020 divorce.

Nikki CiminoPhotographer: Rachel Woolf/Bloomberg

"There's this wild disconnect between what people are experiencing and what economists are experiencing."

What's more, according to Wells Fargo, families have taken on debt at a comparatively fast rate - no doubt to sustain the same lifestyle as low rates and pandemic-era stimmies provided. In fact, it only took four years for households to set a record new debt level after paying down borrowings in 2021 when interest rates were near zero. 

Meanwhile, that increased debt load is exacerbated by credit card interest rates that have climbed to a record 22%, according to the Fed.

[P]art of the reason some Americans were able to take on a substantial load of non-mortgage debt is because they’d locked in home loans at ultra-low rates, leaving room on their balance sheets for other types of borrowing. The effective rate of interest on US mortgage debt was just 3.8% at the end of last year.

Yet the loans and interest payments can be a significant strain that shapes families’ spending choices. -Bloomberg

And of course, the highest-interest debt (credit cards) is hurting lower-income households the most, as tends to be the case.

The lowest earners also understandably had the biggest increase in credit card delinquencies.

"Many consumers are levered to the hilt — maxed out on debt and barely keeping their heads above water," Allan Schweitzer, a portfolio manager at credit-focused investment firm Beach Point Capital Management told Bloomberg. "They can dog paddle, if you will, but any uptick in unemployment or worsening of the economy could drive a pretty significant spike in defaults."

"We had more money when Trump was president," said Denise Nierzwicki, 69. She and her 72-year-old husband Paul have around $20,000 in debt spread across multiple cards - all of which have interest rates above 20%.

Denise and Paul Nierzwicki blame Biden for what they see as a gloomy economy and plan to vote for the Republican candidate in November.
Photographer: Jon Cherry/Bloomberg

During the pandemic, Denise lost her job and a business deal for a bar they owned in their hometown of Lexington, Kentucky. While they applied for Social Security to ease the pain, Denise is now working 50 hours a week at a restaurant. Despite this, they're barely scraping enough money together to service their debt.

The couple blames Biden for what they see as a gloomy economy and plans to vote for the Republican candidate in November. Denise routinely voted for Democrats up until about 2010, when she grew dissatisfied with Barack Obama’s economic stances, she said. Now, she supports Donald Trump because he lowered taxes and because of his policies on immigration. -Bloomberg

Meanwhile there's student loans - which are not able to be discharged in bankruptcy.

"I can't even save, I don't have a savings account," said 29-year-old in Columbus, Ohio resident Brittany Walling - who has around $80,000 in federal student loans, $20,000 in private debt from her undergraduate and graduate degrees, and $6,000 in credit card debt she accumulated over a six-month stretch in 2022 while she was unemployed.

"I just know that a lot of people are struggling, and things need to change," she told the outlet.

The only silver lining of note, according to Bloomberg, is that broad wage gains resulting in large paychecks has made it easier for people to throw money at credit card bills.

Yet, according to Wells Fargo economist Shannon Grein, "As rates rose in 2023, we avoided a slowdown due to spending that was very much tied to easy access to credit ... Now, credit has become harder to come by and more expensive."

According to Grein, the change has posed "a significant headwind to consumption."

Then there's the election

"Maybe the Fed is done hiking, but as long as rates stay on hold, you still have a passive tightening effect flowing down to the consumer and being exerted on the economy," she continued. "Those household dynamics are going to be a factor in the election this year."

Meanwhile, swing-state voters in a February Bloomberg/Morning Consult poll said they trust Trump more than Biden on interest rates and personal debt.

Reverberations

These 'headwinds' have M3 Partners' Moshin Meghji concerned.

"Any tightening there immediately hits the top line of companies," he said, noting that for heavily indebted companies that took on debt during years of easy borrowing, "there's no easy fix."

Tyler Durden Fri, 03/15/2024 - 18:00

Read More

Continue Reading

Trending