Cyberattacks Strike Schools in Maine and Tennessee

January 7, 2025January 7, 2025

Cyberattacks Target School Districts in Maine and Tennessee During Holiday Season

Cybersecurity threats have surged during the holiday season, with recent cyberattacks affecting school districts in Maine and Tennessee. These incidents highlight the growing need for robust cyber defenses in educational institutions. Reports from The Record, a news site from the cybersecurity firm Recorded Future, detail how the South Portland Public Schools in Maine experienced a significant disruption due to a breach linked to a Bulgarian IP address.

In a statement, Andrew Wallace, the Director of Technology for South Portland Schools, assured that while their network was compromised, no student or staff data was believed to be at risk. “After having our vendor partners analyze the access logs and activities on the network, we believe that no student data or staff was compromised — but it certainly was disruptive and stressful,” Wallace explained. Fortunately, the school district managed to restore its systems before classes resumed on Monday, minimizing the impact on students and staff.

Details of the Cyberattacks in School Districts

The situation in Tennessee’s Rutherford County Schools paints a different picture. The district reported a Thanksgiving cyberattack that resulted in the compromise of some employees’ personal information. This breach has led to ongoing network and system interruptions, affecting the daily operations of the school district.

Maine Incident:
- Network shut down after a firewall breach.
- Attack traced back to a Bulgarian IP address.
- No data compromise reported, but significant disruption occurred.
Tennessee Incident:
- Thanksgiving attack compromised employees’ personal details.
- Continuous interruptions in networks and systems.

Government Initiatives to Enhance Cybersecurity in K-12 Schools

These incidents come at a time when the Biden administration is taking steps to strengthen cybersecurity measures in K-12 schools. Initiatives aimed at improving defenses against increasingly sophisticated cyber threats are critical in protecting educational institutions.

To learn more about cybersecurity protocols and protective measures for schools, you can refer to the Cybersecurity and Infrastructure Security Agency and explore additional resources on school safety.

Conclusion: The Need for Enhanced Cybersecurity Measures

The recent cyberattacks on school districts in Maine and Tennessee serve as a stark reminder of the vulnerabilities within educational systems. As cyber threats continue to evolve, the emphasis on implementing robust cybersecurity measures becomes increasingly vital.

We invite you to share your thoughts on these incidents and how schools can better protect themselves from future threats. For more insights into cybersecurity in education, check out our related articles.

Gamaredon Launches BoneSpy and PlainGnome Android Malware

Apple Settles Claims of Unauthorized Siri Data Collection

January 3, 2025January 3, 2025

Apple is facing a $95 million settlement over allegations of illegally collecting and storing user data without consent. Filed in the U.S. Northern California District Court, the lawsuit claims Apple’s Siri personal assistant unlawfully harvested data from voice queries, breaching privacy rights and U.S. law. Key accusations include unauthorized data collection, targeted advertising linked to Siri interactions, and sharing data with third-party advertisers. The settlement, pending court approval, could set a precedent for tech companies regarding data handling practices, raising concerns about user trust and data protection. The case highlights ongoing privacy issues in the technology sector.

Spotting Gift Card Scams: Why They're Getting Trickier

Data Breach: MyGiftCardSupply and Roomster Expose User Info

January 6, 2025January 6, 2025

A major data breach has compromised sensitive information for hundreds of thousands of users linked to MyGiftCardSupply and Roomster. Security researcher JayeLTee revealed that misconfigured servers related to KYC checks exposed nearly 200,000 selfies and over 600,000 identity documents. MyGiftCardSupply’s founder claimed actions were taken to secure files and audit procedures, but many customers are concerned about the breach’s occurrence. Roomster faced a similar issue, with around 320,000 driver’s licenses and passports exposed. Consumers are advised to monitor accounts, use strong passwords, and enable two-factor authentication to protect personal information amidst rising data security threats.

Ukrainian Defense Firms Targeted in Russian Cyberattack

December 10, 2024December 10, 2024

Ukraine’s Computer Emergency Response Team (CERT-UA) has reported a series of cyberespionage attacks targeting its military and defense contractors, linked to the UAC-0185 operation, attributed to Russian cyber activities. This operation employed sophisticated phishing tactics, using fake defense conference invitations to compromise organizations with malicious tools like MeshAgent, which has previously breached over 100 Ukrainian state computers. Recent attacks, including those from the Vermin group and incidents involving GhostWriter and DarkCrystal malware, highlight the urgent need for enhanced cybersecurity among Ukraine’s defense entities amid ongoing conflicts. Continuous monitoring and proactive strategies are essential to counter these evolving threats.

Meta Fined €251M Over 2018 Data Breach Affecting 29M Users

December 18, 2024December 18, 2024

Meta Platforms has been fined €251 million (about $263 million) by the Irish Data Protection Commission for a significant 2018 data breach affecting around 29 million Facebook accounts. The breach, caused by a bug in the “View As” feature, exposed personal data including names, emails, and phone numbers. The DPC found Meta violated several GDPR regulations, including inadequate breach notification and failure to implement data protection principles. This fine adds to Meta’s ongoing legal troubles, following a €91 million penalty in September 2024 for a different security issue and a settlement related to the Cambridge Analytica scandal.

Cyberattack Disrupts Krispy Kreme's Online Orders

Slovakian Land Registry Suffers Major Cyberattack

January 13, 2025January 13, 2025

Slovakia’s Geodesy, Cartography and Cadastre Office (UGKK) has been hit by a major ransomware attack, leading to system shutdowns and office closures. Agriculture Minister Richard Takac called it the largest cyber intrusion in the country’s history, raising concerns about national security amid ongoing tensions with Ukraine. The attack has disrupted land registry data services, causing paralysis in real estate transactions and public services like parking permits. While UGKK is working to restore operations using backup systems, uncertainties may prolong recovery for months. This incident highlights the urgent need for improved cybersecurity measures in Slovakia.

Cleo Zero-Day Exploits Trigger Widespread Cyber Intrusions

December 12, 2024December 12, 2024

A critical vulnerability in Cleo management file transfer software, CVE-2024-50623, is under attack, having been exploited since December 3, 2023, by cybercriminals targeting at least ten organizations. This flaw affects Cleo LexiCom, Harmony, and VLTrader, enabling hackers to manipulate the software for data exfiltration. Attackers have used various methods, including writing files to autorun directories and executing malicious PowerShell commands. Experts warn that these threats are linked to the Termite ransomware operation. Organizations using Cleo software are urged to implement firewalls, limit external access, and stay updated on security patches to mitigate risks.