edtechmagazine.com AI Phishing and DDoS Attacks Surge as School Year Begins
Article Content
- •DDoS attacks on schools nearly doubled in August and September 2024.
- •Over 52% of U.S. school districts experienced a cybersecurity incident in 2025.
- •AI is being used to create sophisticated phishing attacks targeting educational staff.
As the school year starts, cybercriminals are exploiting the busy period with increased phishing and DDoS attacks targeting educational institutions. Data shows DDoS attacks against schools nearly doubled in August and September 2024 compared to the summer months. Over 52% of U.S. school districts reported a cybersecurity incident in 2025, marking a significant increase from the previous year. Attackers utilize AI to craft convincing phishing messages, making it easier to deceive staff who are preoccupied with new academic responsibilities. The rise in attacks is compounded by the fact that many schools lack adequate cybersecurity training for their staff. The urgency for schools to bolster their cybersecurity measures is critical as they prepare for the influx of students and staff. Recommendations include reviewing account configurations and monitoring unusual account activity to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Education in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…