# GÉANT Security

> Generated by All in One SEO v5.0.3, this is an llms.txt file, used by LLMs to index the site.

## Sitemaps

- [XML Sitemap](https://security.geant.org/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [Ransomware disrupts University of Illinois Chicago medical school; hackers steal data](https://security.geant.org/ransomware-disrupts-university-of-illinois-chicago-medical-school-hackers-steal-data/): Ransomware temporarily knocked some systems offline at the University of Illinois Chicago’s College of Medicine, and attackers stole information from college servers. UIC said the affected systems were restored by Monday. The university’s main network was unaffected, and patient care at UI Health continued.
- [Osaka Metropolitan University cancels classes after suspected ransomware attack](https://security.geant.org/osaka-metropolitan-university-cancels-classes-after-suspected-ransomware-attack/): One of Japan’s largest universities canceled classes and shut down a large part of its IT infrastructure following a suspected ransomware attack that began late last week. Osaka Metropolitan University said on Tuesday that the outage left its internal network, email and a range of administrative and academic systems unavailable. OMU said it believes ransomware
- [Threat actor hijacked subdomains at 30+ major universities, researcher found](https://security.geant.org/threat-actor-hijacked-subdomains-at-30-major-universities-researcher-found/): Alex Shakhov, the founder of a cybersecurity consulting firm, disclosed in a recent blog post that earlier this month he discovered that a threat actor had taken over 34 .edu subdomains at major universities — including MIT, Harvard, Stanford and Columbia. He found that Google had even indexed the results, websites that are serving “pornographic
- [UK academic institutions are under assault by hackers](https://security.geant.org/uk-academic-institutions-are-under-assault-by-hackers/): The education sector is battling a torrent of cyber threats, with new research showing attacks on colleges and universities surging by 67% over the last year. SonicWall said its threat intelligence team has recorded more than 19.3 million medium and high-severity intrusion attempts so far this year – a significant increase compared to the 11.5
- [Academic publisher Elsevier hit by LAPSUS$ redirect attack](https://security.geant.org/academic-publisher-elsevier-hit-by-lapsus-redirect-attack/): Academic publishing giant Elsevier confirmed a compromise this week after students found its platform redirecting users to a cybercriminal crew's leak page. One Reddit user, a self-described nursing student, highlighted the issue on September 22, posting a screenshot of LAPSUS$’s leak site after trying to access “homework and textbooks.” “Every time I try to open
- [Foreign Interference Fears Over Cyberattacks on Academic Blogs](https://security.geant.org/foreign-interference-fears-over-cyberattacks-on-academic-blogs/): A wave of cyberattacks on British academic blogs has raised concerns over alleged efforts by authoritarian regimes to shut down research into human rights abuses. Just one hour after a post about Roshaan Khattak, an exiled Pakistani scholar who was based at Wolfson College, Cambridge until December, was published by the 21 Group on Sept.
- [SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing](https://security.geant.org/sidecopy-broadens-india-targeting-to-academia-with-reverserat-spear-phishing/): The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers Boggavarapu R S S Srinivas
- [Cyberattack hits University of Munich, potentially exposing student financial data](https://security.geant.org/cyberattack-hits-university-of-munich-potentially-exposing-student-financial-data/): Germany’s Ludwig Maximilian University of Munich is investigating a cyberattack in which an unknown hacker accessed a system containing sensitive student information, including potential health insurance and financial aid data. The university, commonly known as LMU Munich, said Saturday that an attacker accessed enrollment data stored on one of its IT systems. “Currently, we must
- [No ransoms paid in cyberattacks on UMMC and IHL, officials say](https://security.geant.org/no-ransoms-paid-in-cyberattacks-on-ummc-and-ihl-officials-say/): No ransoms were paid to hackers during the cyberattacks that hit the University of Mississippi Medical Center or Institutes of Higher Learning this year, officials confirmed to Mississippi Today. “No state taxpayer dollars were used” to pay the perpetrators of either attack, said Sen. Nicole Boyd, a Republican from Oxford and the chair of the
- [Monitoring](https://security.geant.org/monitoring/): With the use of advanced monitoring tools, our engineers can maintain a holistic view and an understanding of real-time threats against the GÉANT network.
- [TheGentlemen Ransomware Attack Targets University of San Francisco](https://security.geant.org/thegentlemen-ransomware-attack-targets-university-of-san-francisco/): On September 7, 2026, the ransomware group TheGentlemen publicly claimed responsibility for a cyberattack against University of San Francisco (usfca.edu), a prestigious Jesuit institution in the USA. The group issued a statement threatening to release sensitive data unless the university initiates negotiations.
- [CLAW 2022](https://security.geant.org/claw-2022/): Community representatives from communications, NOC, CSIRT and information security management were welcomed at CLAW 2022, in Poznan, Poland.
- [CLAW 2023](https://security.geant.org/claw-2023/): CLAW 2023 - the Crisis Management Workshop for the GÉANT Community - will take place on 5 - 6 December 2023, hosted by PSNC, Poznan, Poland.
- [CLAW 2024](https://security.geant.org/claw-2024/): CLAW 2024: The Crisis Management Workshop for the GÉANT Community. The workshop will take place from 3-4 December 2024, at La Salle Campus, Barcelona, Spain.
- [Hackers Use Fake Student Resume to Secretly Install Malware on Researchers’ Computers](https://security.geant.org/hackers-use-fake-student-resume-to-secretly-install-malware-on-researchers-computers/): A fake student resume is being used to place a remote-access tool on researchers’ Windows computers. The campaign hides a Windows executable inside an archive that appears to contain a graduate-school application, then opens a genuine Word document while the infection runs quietly in the background. The malicious ZIP archive uses a Chinese-language name that
- [Ransomware Group DYSPHOR1A Claims Hit on Delhi University](https://security.geant.org/ransomware-group-dysphor1a-claims-hit-on-delhi-university/): The University of Delhi (DU) has reportedly been hit by a ransomware group calling itself DYSPHOR1A, according to an incident report sourced from Ransomware.live via the cybersecurity platform HookPhish. The report dated the breach and its discovery to August 21, 2026, at 02:20 IST, and listed DU under the education sector in the India region.
- [Back-to-School Cyber Risks Surge as Education Remains the World’s Most Attacked Sector](https://security.geant.org/back-to-school-cyber-risks-surge-as-education-remains-the-worlds-most-attacked-sector/): Between January and July 2026, educational organizations such as colleges and universities, research institutes, and K-12 school systems alike, faced an average of 4,696 weekly cyberattacks per organization, representing an 8% increase compared to the same period in 2025 and more than double the global cross-industry average of 2,150 attacks. Education also ranked highest among
- [DOJ unseals new charges against 17 hackers in Iran-backed campaign](https://security.geant.org/doj-unseals-new-charges-against-17-hackers-in-iran-backed-campaign/): According to Tuesday’s statement by the DOJ, the Mabna Institute since at least 2013 and through 2017 targeted more than 100,000 ⁠accounts ​of professors around the world, including the ​successful penetration of roughly 8,000 professor email accounts across 144 U.S.-based universities and 178 universities ​in other countries.
- [HK Baptist University reviews IT security after ransomware group claims breach](https://security.geant.org/hk-baptist-university-reviews-it-security-after-ransomware-group-claims-breach/): Baptist University has said it is reviewing the security of its information technology (IT) systems after a ransomware group claimed online to have illegally accessed the Hong Kong institution’s data. The allegations were made by “The Gentlemen”, an advanced cybercrime group that first appeared in the middle of last year. Cybersecurity monitoring platforms reported that
- [University of Texas forced to take systems offline in San Antonio after cyberattack](https://security.geant.org/university-of-texas-forced-to-take-systems-offline-in-san-antonio-after-cyberattack/): The University of Texas at San Antonio, which serves 40,000 students across six campuses, said its IT team identified threat activity on its academic campus over the weekend and took some systems, including phones, offline in response. Classes for many students begin on Wednesday, and the disruptions threaten to snarl systems people use to sign
- [Sogang University latest to report data breach in Korea](https://security.geant.org/sogang-university-latest-to-report-data-breach-in-korea/): Sogang University has become the latest South Korean institution to report a data breach, adding to a series of cyber incidents that have exposed vulnerabilities across the country's corporate, government and education systems. The private elite university in Seoul said an external attacker gained unauthorized access to its integrated login system on Aug. 11 through
- [Newcastle University confirms data breach tied to admissions system configuration flaw](https://security.geant.org/newcastle-university-confirms-data-breach-tied-to-admissions-system-configuration-flaw/): Newcastle University has confirmed that a configuration flaw affecting a connection to one of its admissions systems allowed unauthorized access to personal information, including names, email addresses, telephone numbers and postal addresses. The university identified the issue after being alerted to possible unauthorized access on July 27 and has since corrected the flaw. Officials said
- [Université Libre de Bruxelles Data Breach](https://security.geant.org/universite-libre-de-bruxelles-data-breach/): Université Libre de Bruxelles, an education organization based in Belgium, has been listed as a victim on the qilin ransomware group’s dark web portal, published on August 9, 2026. The listing was identified through SOCRadar’s Dark Web Monitoring service. Based on the sector and country data captured for the listing, the organization operates in the
- [Scotland's university procurement center confirms cybercrooks broke in](https://security.geant.org/scotlands-university-procurement-center-confirms-cybercrooks-broke-in/): Advanced Procurement for Universities and Colleges (APUC) says attackers gained unauthorized access to historical data in a cyberattack earlier this month. The Scottish education procurement body said it immediately contained the mid-July intrusion and was investigating claims that some of the data had been stolen. "We recently discovered suspicious activity on our IT systems involving
- [University of St. Thomas to Compensate Data Breach Victims](https://security.geant.org/university-of-st-thomas-to-compensate-data-breach-victims/): University of St. Thomas students, employees and alumni whose personal information was compromised in a 2025 data breach may be eligible for some relief after the institution received preliminary approval to settle a class action lawsuit. The private Catholic university in Houston reached an agreement in late May in state district court that allows affected
- [Southeastern Oklahoma State University to reopen Tuesday after cybersecurity incident](https://security.geant.org/southeastern-oklahoma-state-university-to-reopen-tuesday-after-cybersecurity-incident/): Southeastern Oklahoma State University experienced a cybersecurity incident last Thursday, prompting officials to pull certain computers offline and close the physical campus for three days. The university has brought in a third-party cybersecurity team to assist with the investigation and work on restoring impacted departments. Officials said only certain departments were affected.
- [UK education department hack exposes 607,000 records of school leaders, university staff](https://security.geant.org/uk-education-department-hack-exposes-607000-records-of-school-leaders-university-staff/): The personal details of hundreds of thousands of school leaders, university staff and government officials have reportedly been exposed after hackers breached a UK Department for Education (DfE) system. The cyberattack is said to have compromised around 607,000 records, including names, job titles, email addresses and phone numbers of people who had interacted with the
- [Newcastle University Listed by ExfilSquad Ransomware Group](https://security.geant.org/newcastle-university-listed-by-exfilsquad-ransomware-group/): On July 26, 2026, Newcastle University appeared on the leak site operated by the ransomware group ExfilSquad. The listing states that the UK institution suffered a ransomware attack in which internal files were exfiltrated. The university has not yet published its own breach notification detailing the exact scope, but the leak-site entry claims approximately 440,000
- [Ransomware Attacks Targeting Universities on the Rise](https://security.geant.org/ransomware-attacks-targeting-universities-on-the-rise/): Universities have found themselves in the firing line of cybercriminals, as ransomware attacks against higher education institutions have increased, analysis of recent incidents has revealed. According to the Comparitech’s Education Ransomware Roundup for the first half of 2026, the number of attacks against higher education providers between January and June increased by 8% when compared
- [Houston college hit with class action over data breach that affected nearly 69,000 students](https://security.geant.org/houston-college-hit-with-class-action-over-data-breach-that-affected-nearly-69000-students/): A Houston vocational college is accused in a class-action lawsuit of failing to protect students and employees from a “massive and preventable data breach” in 2025. Former and current students and employees of the College of Healthcare Professions, a vocational school headquartered in Houston with campuses across the city and state, filed a consolidated class
- [Jisc recommits to academic cyber collaboration network](https://security.geant.org/jisc-recommits-to-academic-cyber-collaboration-network/): Jisc, the non-profit organisation devoted to delivering digital infrastructure and shared services across the UK’s higher education sector, has resigned an updated cyber threat intelligence sharing agreement with its counterparts from across the English-speaking world. The Global Cyber Threat Sharing Memorandum of Understanding (MoU) brings together Australia’s AARNet, Canada’s CANARIE, REN-ISAC and OmniSOC in the
- [Mount Royal University confirms breach as hackers claim attack](https://security.geant.org/mount-royal-university-confirms-breach-as-hackers-claim-attack/): Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university's network. In an update published on its website, MRU states that it has engaged technical teams and external cybersecurity experts to investigate the incident and to support recovery efforts following a cyberattack on June
- [Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities](https://security.geant.org/suspected-chinese-espionage-group-used-a-roundcube-exploit-chain-to-burrow-into-universities/): China-aligned attackers broke into the networks of U.S. and Canadian universities to steal sensitive data and establish persistent access via webshells and backdoors, Proofpoint threat researchers said Tuesday. The espionage-motivated attacks targeted physics and engineering departments, focusing on administrators and professors with national security links or organizations researching astrophysics and particle physics. Proofpoint identified less
- [From ransomware to attacks on research environments: cybersecurity incidents in academia - May 2026](https://security.geant.org/from-ransomware-to-attacks-on-research-environments-cybersecurity-incidents-in-academia-may-2026/): Unlike the highly disruptive incidents observed in previous years, many of the May cases reflected a model of “persistent pressure”. Cybercriminals increasingly focused on identity systems, administrative infrastructure, and institutions involved in advanced research projects and international cooperation.
- [University of Alicante thwarts major ransomware attack on IT infrastructure](https://security.geant.org/university-of-alicante-thwarts-major-ransomware-attack-on-it-infrastructure/): IT Service technicians worked diligently throughout the weekend to verify that "there has been no data breach and the University’s core systems remain unaffected; consequently, the UA administrative operations, excluding the services disabled as a precaution, have continued to run smoothly." The academic institution confirmed that "although the malware managed to penetrate some servers, no
- [Mount Royal University responding to cyberattack, website down](https://security.geant.org/mount-royal-university-responding-to-cyberattack-website-down/): Mount Royal University says it's investigating a cyberattack that disrupted its systems on Wednesday. "When the issue was identified, the university took prompt steps to contain the threat and protect its systems," the university wrote in a post on a separate page from its main website, which was still down as of 12 p.m. Friday.
- [Nelson University suffers ransomware attack that may have exposed sensitive personal data](https://security.geant.org/nelson-university-suffers-ransomware-attack-that-may-have-exposed-sensitive-personal-data/): Nelson University, a private Christian university in Waxahachie, Texas, has disclosed a ransomware attack in which an unauthorized party gained access to its systems and allegedly obtained sensitive data belonging to an undisclosed number of individuals. The attack took place between March 21, 2025, and April 6, 2025. Approximately 10 days after the intrusion window
- [University of Nottingham Confirms Breach After Hackers Leak Data](https://security.geant.org/university-of-nottingham-confirms-breach-after-hackers-leak-data/): The University of Nottingham in the UK has confirmed suffering a data breach after the notorious ShinyHunters hacker collective leaked files stolen from the university’s systems. The University of Nottingham is a major research university in the UK, ranked among the world’s top 100 institutions and home to more than 35,000 students on its UK
- [ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw](https://security.geant.org/shinyhunters-is-actively-extorting-universities-after-exploiting-an-unpatched-oracle-flaw/): Researchers are warning that cybercriminals exploited an Oracle PeopleSoft zero-day vulnerability and potentially infiltrated the networks of more than 100 organizations in an attack spree that largely impacted higher education. Mandiant and Google Threat Intelligence Group said it became aware of the attacks earlier this month as part of its ongoing monitoring of ShinyHunters operations.
- [CLAW 2019](https://security.geant.org/claw-2019/): The goal of CLAW 2019 is to enhance the crisis management skills of people from NOC, marcomms, CSIRT, ISM, services and higher NREN management.
- [Oxford University discloses data breach after careers platform hack](https://security.geant.org/oxford-university-discloses-data-breach-after-careers-platform-hack/): The University of Oxford disclosed a new data breach last week after being informed by its third-party provider, Group GTI, that its CareerConnect career services platform had been compromised. Oxford University said the CareerConnect platform was breached on May 28 by attackers who gained access to users' first names, last names, email addresses, and encrypted
- [Cyberattack sparks lawsuits against CCC](https://security.geant.org/cyberattack-sparks-lawsuits-against-ccc/): Current and former students are suing Clackamas Community College after a data breach that occurred in September of 2025 which exposed sensitive personal information belonging to more than 33,000 people. The lawsuits, including a proposed federal class-action case, allege the college failed to adequately protect confidential student and employee data after hackers gained unauthorized access
- [Australian College of Business Intelligence investigating Qilin ransomware claims](https://security.geant.org/australian-college-of-business-intelligence-investigating-qilin-ransomware-claims/): The Australian College of Business Intelligence (ACBI) has said it is aware of claims made by a ransomware group and is actively investigating a potential cyber incident. The Qilin cyber extortion group listed ACBI on 15 May; however, the affiliate behind the alleged attack has so far declined to share any details of the incident
- [Canvas hack: Company pays criminals to delete students' stolen data](https://security.geant.org/canvas-hack-company-pays-criminals-to-delete-students-stolen-data/): The company behind the popular Canvas software, which was hacked last week causing major disruption at thousands of universities and colleges, has paid the hackers not to publish stolen data online. The cyber-attack affected an estimated 9,000 institutions in the US, Canada, Australia and the UK, with exams disrupted after the Canvas service went down.
- [Canvas Breach Disrupts Schools & Colleges Nationwide](https://security.geant.org/canvas-breach-disrupts-schools-colleges-nationwide/): An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the service’s login page with a ransom demand that threatened to leak data from 275 million students and faculty across nearly 9,000 educational institutions.
- [Instructure Investigating Cyber Attack, Exposure of User Data](https://security.geant.org/instructure-investigating-cyber-attack-exposure-of-user-data/): The ed-tech giant behind the Canvas learning management system is working with forensic experts to determine the full scope of the incident, though it seems passwords and financial information were not compromised. ... According to a May 2 update from Proud, preliminary findings suggested the incident was caused by a “criminal threat actor” and may
- [Cyber attacks on universities rise 63% around the world](https://security.geant.org/cyber-attacks-on-universities-rise-63-around-the-world/): Cyber attacks on education institutions rose 63% globally over the past year, according to Quorum Cyber, which recorded 425 incidents across 67 countries in the latest 12-month period. The figures come from Quorum Cyber's Global Cyber Risk Outlook for Higher Education, which tracked attacks between November 2024 and October 2025 and compared them with the
- [University of Warsaw Data Breach Exposes 200,000+ Sensitive Files on Darknet](https://security.geant.org/university-of-warsaw-data-breach-exposes-200000-sensitive-files-on-darknet/): Over 200,000 files containing sensitive personal information have been leaked following the University of Warsaw cyberattack that targeted the institution’s digital systems. The attack, which resulted in the publication of the stolen data on the darknet in mid-April 2026, has raised significant concerns about the university’s cybersecurity protocols. In response to the breach, the University
- [Tulane employees’ social security numbers, banking details exposed in data breach](https://security.geant.org/tulane-employees-social-security-numbers-banking-details-exposed-in-data-breach/): Multiple Tulane University employees are victims of a data breach that exposed names, social security numbers, direct deposit and banking information, according to letters sent by the university. It is unclear how many employees are affected. Tulane has confirmed the authenticity of the letters. Tulane notified affected employees — including student employees — on April
- [Harvard faces ‘active and specific cybersecurity threat’](https://security.geant.org/harvard-faces-active-and-specific-cybersecurity-threat/): Online actors are posing as Harvard University IT personnel and setting up phony websites, designed to look like official Harvard login pages, as part of a targeted campaign to intrude into the university’s network, The Harvard Crimson reported Friday. Harvard Chief Information Security and Data Privacy Officer Michael Tran Duff wrote in an email to
- [Ransomware group claims it stole data from Monmouth University](https://security.geant.org/ransomware-group-claims-it-stole-data-from-monmouth-university/): The PEAR (Pure Extraction and Ransom) cybercriminal group this month took credit for a ransomware attack against Monmouth University in New Jersey, claiming it made off with 16 terabytes the institution’s data. University President Patrick Leahy emailed students last week about the attack, noting that cybersecurity experts and law enforcement officials had been recruited to
- [Cyberattackers encrypt Community College of Beaver County's data and demand ransom payments](https://security.geant.org/cyberattackers-encrypt-community-college-of-beaver-countys-data-and-demand-ransom-payments/): The Community College of Beaver County is under a cyberattack, with unknown bad actors encrypting all college data and demanding ransom payments to lift it. "We came to campus this morning, the first day of spring break, and our IT department notified us that they received a ransom note and that we had been under
- [UK academia strong, but still at threat from cyber attack](https://security.geant.org/uk-academia-strong-but-still-at-threat-from-cyber-attack/): Cyber attacks targeting UK universities, colleges, and research institutions are becoming more sophisticated, despite a decrease in the number of major incidents last year, according to a new report from Jisc. The annual cyber threat intelligence report, shared with members of the Jisc cybersecurity community, reveals that while the number of significant cyber incidents fell
- [Protection](https://security.geant.org/protection/): Security is deep routed throughout and our protection methods are constantly progressing to maintain and provide security of the highest standard.
- [University of Mississippi Medical Center Closes Clinics After Ransomware Attack](https://security.geant.org/university-of-mississippi-medical-center-closes-clinics-after-ransomware-attack/): A ransomware attack has forced the University of Mississippi Medical Center (UMMC) to temporarily close most of its clinics, cancel elective procedures, and shift to manual documentation as IT systems remain offline. UMMC has confirmed that it has made contact with the group responsible for the attack, though it has not disclosed the threat actor’s
- [Italian university La Sapienza still offline to mitigate recent cyber attack](https://security.geant.org/italian-university-la-sapienza-still-offline-to-mitigate-recent-cyber-attack/): Rome’s La Sapienza University was hit by a cyberattack that disrupted IT systems and caused widespread operational issues. Since February 2, Rome’s La Sapienza University, one of the most important Italian universities, has been offline due to a cyberattack. For days, students have been unable to book exams, check tuition payments, or access faculty contacts.
- [Qilin Ransomware Strikes Sukhothai Thammathirat Open University](https://security.geant.org/qilin-ransomware-strikes-sukhothai-thammathirat-open-university/): On January 27, 2026, the notorious ransomware group Qilin claimed responsibility for a cyberattack targeting Sukhothai Thammathirat Open University (stou.ac.th), a major educational institution in Thailand. The threat actors have indicated the possibility of leaking sensitive data unless the university engages in negotiations.
- [Cybersecurity Threats to Universities and Colleges — How to Stay Safe](https://security.geant.org/cybersecurity-threats-to-universities-and-colleges-how-to-stay-safe/): As digital transformation accelerates, universities and colleges are becoming high-value targets for cybercriminals.
- [Trocaire College Ransomware Incident Exposes Social Security Numbers, 23k Affected](https://security.geant.org/trocaire-college-ransomware-incident-exposes-social-security-numbers-23k-affected/): On Dec. 4, 2025, Trocaire College, a private Catholic institution in Buffalo, N.Y., discovered that a ransomware attack had compromised its digital environment. The threat actor known as INC RANSOM posted on the tor network, claiming to have obtained data belonging to Trocaire College. This group is known for targeting organizations with ransomware and threatening
- [Toll of Monroe University hack exceeds 320K](https://security.geant.org/toll-of-monroe-university-hack-exceeds-320k/): New York-based Monroe University has confirmed that more than 320,000 people had their information compromised following a December 2024 cyberattack, Cybernews reports. Threat actors who infiltrated the university's systems between Dec. 9, 2024 and Dec. 23, 2024 were able to pilfer individuals' names, birthdates, Social Security numbers, passport numbers, driver's license numbers, government ID numbers,
- [University of Hawaii Cancer Center hit by ransomware attack](https://security.geant.org/university-of-hawaii-cancer-center-hit-by-ransomware-attack/): University of Hawaii says a ransomware gang breached its Cancer Center in August 2025, stealing data of study participants, including documents from the 1990s containing Social Security numbers. ... In response to the attack, UH has also taken measures to secure its systems against further breach attempts, including installing endpoint protection software, replacing compromised systems,
- [Cyberattack spree hits Korean universities, hospitals](https://security.geant.org/cyberattack-spree-hits-korean-universities-hospitals/): On Jan. 7, the Ministry of Science and ICT said it had identified activity by an unidentified hacking group that stole internal data from domestic medical institutions and online retailers and sold it through a hacker community known as “Hacking Forum.” According to the government, a hacker using a specific nickname posted multiple messages on
- [Indian Universities face record 8,487 weekly cyberattacks, student data sold on dark web: Report](https://security.geant.org/indian-universities-face-record-8487-weekly-cyberattacks-student-data-sold-on-dark-web-report/): The education sector has emerged as one of the most targeted industries for cybercriminals worldwide, with Indian institutions bearing the brunt of attacks. According to data from Check Point Research (CPR), education and research organisations in India have faced an average of 8,487 cyberattacks per week over the past six months, almost twice the global
- [Aurora College suspends classes after cyberattack](https://security.geant.org/aurora-college-suspends-classes-after-cyberattack/): Aurora College in the N.W.T. has suspended all classes this week after the school's network was subject to a cyberattack over the holidays. In a news release on Sunday, the college said that all of its servers and online platforms are offline including e-learning, email, as well as self-service and student application portals. The school
- [Inha University Confirms Data Leak, Sues Gunra](https://security.geant.org/inha-university-confirms-data-leak-sues-gunra/): Inha University confirmed signs of a personal information leak involving its members due to an external hacking incident and filed a complaint with the police against the hacker group "Gunra (Gunra)." Inha University announced on the 5th that it had filed the complaint with the National Police Agency’s Cyber Terror Investigation Unit, accusing Gunra of
- [Sydney Uni Hack: How Hackers Breached a Top Repository, Exposing 13,000 Lives](https://security.geant.org/sydney-uni-hack-how-hackers-breached-a-top-repository-exposing-13000-lives/): In the early hours of December 18, 2025, Australia’s University of Sydney disclosed a significant cybersecurity breach, revealing that hackers had infiltrated an online coding repository and siphoned off personal data belonging to thousands of staff, students, alumni, and donors. The incident, which the university described as involving ‘historic data,’ has thrust one of the
- [University of Phoenix data breach affects 3.5 million amid Clop ransomware attack](https://security.geant.org/university-of-phoenix-data-breach-affects-3-5-million-amid-clop-ransomware-attack/): The University of Phoenix has confirmed a significant data breach impacting nearly 3.5 million current and former students, employees, faculty, and suppliers. The incident, which occurred in November, is attributed to the Clop ransomware group, as reported by Silicon Angle. The Clop ransomware group exploited a previously unknown vulnerability in Oracle Corp.'s E-Business Suite, gaining
- [Major Australian university targeted in cyberattack](https://security.geant.org/major-australian-university-targeted-in-cyberattack/): Hackers have accessed the personal information of thousands of people at the University of Sydney in a cyberattack targeting the institution's online code library. Vice president of operations Nicole Gower confirmed today "historical data files" were accessed last week, including the personal information of about 10,000 current and about 12,500 former staff and affiliates that
- [Over 70 Domains Used in Months-Long Phishing Spree Against US Universities](https://security.geant.org/over-70-domains-used-in-months-long-phishing-spree-against-us-universities/): A new report from security firm Infoblox reveals that at least 18 American universities have been hit by a prolonged, coordinated phishing attack over a period of many months. According to Infoblox’s blog post, shared with Hackread.com, this campaign ran from April to November 2025 and aimed to steal student and staff account details, even
- [Ladies’ College is targeted in a ransomware attack](https://security.geant.org/ladies-college-is-targeted-in-a-ransomware-attack/): Computer systems at The Ladies’ College were hacked in a ransomware attack as the school was exposed for using a weak password and poor systems. ... But the school immediately reported itself to the Office of the Data Protection Authority for a data breach immediately, cooperated with its investigation and has been ordered to update
- [Penn and Phoenix Universities Disclose Data Breach After Oracle Hack](https://security.geant.org/penn-and-phoenix-universities-disclose-data-breach-after-oracle-hack/): The University of Pennsylvania and the University of Phoenix confirmed on Tuesday that they are among the many victims of the recent cybercrime campaign targeting customers of Oracle’s E-Business Suite (EBS) solution. The University of Pennsylvania is sending out data breach notification letters to individuals whose personal information was compromised as a result of an
- [Ivy League universities under siege: The cyberattacks targeting Harvard, Princeton and Penn](https://security.geant.org/ivy-league-universities-under-siege-the-cyberattacks-targeting-harvard-princeton-and-penn/): Harvard University, Princeton University and the University of Pennsylvania have all disclosed data breaches that compromised sensitive information about alumni, donors, students and faculty members. The incidents underscore a growing threat: Elite educational institutions have become prime targets for cybercriminals seeking access to valuable personal and financial data.
- [Harvard cyberattack data breach exposes alumni, donors, students and faculty records?](https://security.geant.org/harvard-cyberattack-data-breach-exposes-alumni-donors-students-and-faculty-records/): Harvard cyberattack data breach exposes alumni, donors, students and faculty records after a phone-based phishing attack. The university confirmed that personal contact information, donation details, and event records were accessed. Harvard is investigating the breach with cybersecurity experts and law enforcement. Harvard cyberattack data breach exposes alumni, donors, students and faculty records after an unauthorized
- [Dartmouth College confirms data breach after Clop extortion attack](https://security.geant.org/dartmouth-college-confirms-data-breach-after-clop-extortion-attack/): Dartmouth College has disclosed a data breach after the Clop extortion gang leaked data allegedly stolen from the school's Oracle E-Business Suite servers on its dark web leak site. In a breach notification letter filed with the office of Maine's Attorney General, Dartmouth says the attackers exploited an Oracle E-Business Suite (EBS) zero-day vulnerability to
- [Data breach compromises Princeton University](https://security.geant.org/data-breach-compromises-princeton-university/): Princeton University had information from its students, faculty members, alumni, and donors breached following a phishing attack against one of its employees, BleepingComputer reports. Infiltration of Princeton University's systems allowed threat actors to access a database containing names, phone numbers, email addresses, and home and business addresses belonging to current students, current and previous faculty
- [UPenn Confirms Cyber Attack as Hackers Claim Data on 1.2M People](https://security.geant.org/upenn-confirms-cyber-attack-as-hackers-claim-data-on-1-2m-people/): The University of Pennsylvania said Tuesday it is confident that a data breach attack in which hackers allege they accessed large volumes of personal donor, student, and alumni information has been "contained" and the school has hired cybersecurity professionals to help investigate. While it's been reported that hackers allege accessing data on 1.2 million students,
- [Prestigious Haileybury College confirms cyber security incident](https://security.geant.org/prestigious-haileybury-college-confirms-cyber-security-incident/): “This week, Haileybury became aware of a malicious attempt to access our systems,” Derek Scott, CEO and principal of the school, said in a 31 October statement. Scott said the breach was contained once the intrusion had been discovered and that impacted systems were isolated. “Haileybury’s comprehensive Cyber Security Incident Response Plan was instantly activated,
- [UWindsor demands big fees for ransom documents, then won’t confirm if they exist](https://security.geant.org/uwindsor-demands-big-fees-for-ransom-documents-then-wont-confirm-if-they-exist/): The University of Windsor tried to charge nearly $9,000 for documents revealing if or how much ransom money it paid cybercriminals — now it refuses to admit whether the records exist. Article content It’s the latest twist in a more than three-year Windsor Star fight to confirm if the university paid off criminals with public
- [University of Pennsylvania investigating offensive email sent through graduate school system](https://security.geant.org/university-of-pennsylvania-investigating-offensive-email-sent-through-graduate-school-system/): The University of Pennsylvania is investigating an email that was sent out to thousands of current and former students on Friday afternoon containing offensive language and threats of a data breach. A spokesperson for the university told Recorded Future News that the email, sent from an address belonging to the Graduate School of Education (GSE),
- [Incident response](https://security.geant.org/incident-response/): Incident response is a key concern of our security team. Using a wide range of specialist tools engineers respond and adapt to all security-related incidents.
- [WISE - Wise Information Security for Collaborating e-Infrastructures](https://security.geant.org/wise/): WISE provides a trusted global framework where security experts can share information, experiences about certification processes and threat intelligence.
- [Trusted Certificate Service](https://security.geant.org/trusted-certificate-services/): The Trusted Certificate Service provides National Research and Education Networks with cost-effective and easy to use management of digital certificates.
- [Blue Team Training](https://security.geant.org/blue-team/): The Blue Team Training programme provides participants with practical and hands-on experience of some basic tasks in intrusion detection and countermeasures.
- [Training | IT Forensics for System Administrators](https://security.geant.org/forensics-training/): Forensics training: An introduction to the basic steps of incident handling and forensic investigations and the principles of forensic investigations.
- [Training | Vulnerability Management](https://security.geant.org/vulnerability-training/): Vulnerability Training: Vulnerabilities, in software and hardware, are open gates attackers can utilise to gain access to systems and networks.
- [Training | Distributed Denial of Service (DDoS) protection](https://security.geant.org/ddos/): View training slides and videos relating to DDoS - Distributed Denial of Service protection.
- [Training | Domain Name System (DNS) protection](https://security.geant.org/dns/): View training videos relating to Domain Name System (DNS) protection.
- [Training | Client Privacy and Security](https://security.geant.org/client-privacy/): View training slides and videos relating to Client Privacy and Security.
- [Training | Operating System Privacy and Security](https://security.geant.org/operating-system/): View training slides and videos relating to Operating System Privacy and Security.
- [Wits University IT system hit by ‘zero-day’ event](https://security.geant.org/wits-university-it-system-hit-by-zero-day-event/): he University of the Witwatersrand has confirmed its Oracle E-Business system has been hit by a cyber attack that has compromised its system in multiple countries. "This is a 'zero-day' event − a cyber attack which exploits a software vulnerability that is unknown to the software vendor and has no patch. It means that the
- [University of St. Thomas releases little information after massive data breach](https://security.geant.org/university-of-st-thomas-releases-little-information-after-massive-data-breach/): The University of St. Thomas had hundreds of thousands of documents stolen earlier this year in a data breach, according to ABC13's reporting partners at the Houston Chronicle, and now a hacking group has taken responsibility. This hack happened in early August, according to ABC13's reporting partners, but the university is staying tight-lipped with no
- [Why Universities Are Ransomware's Easy Target: Lessons from the 23% Surge](https://security.geant.org/why-universities-are-ransomwares-easy-target-lessons-from-the-23-surge/): While businesses collectively paid $814 million in ransomware in 2024, one sector saw attacks surge 23% in the first half of 2025 alone: higher education. This sharp increase reflects the challenge of running secure operations in open, collaborative environments. Higher education institutions are prime targets for ransomware attacks due to their open, decentralized IT environments,
- [Harvard investigating breach linked to Oracle zero-day exploit](https://security.geant.org/harvard-investigating-breach-linked-to-oracle-zero-day-exploit/): Harvard University is investigating a data breach after the Clop ransomware gang listed the school on its data leak site, saying the alleged breach was likely caused by a recently disclosed zero-day vulnerability in Oracle's E-Business Suite servers. "Harvard is aware of reports that data associated with the University has been obtained as a result
- [After the cyberattack – Umeå University analyses the system](https://security.geant.org/after-the-cyberattack-umea-university-analyses-the-system/): The cyberattack against Miljödata at the end of August affects many people. Umeå University is conducting a risk and vulnerability analysis before the system becomes available again. The cyberattack targeted Miljödata, the supplier of Adato, the system support used by Umeå University in the rehabilitation process for employees. More than 100 organisations in Sweden were
- [Major Sydney university suffers huge email scam with students told degrees 'revoked'](https://security.geant.org/major-sydney-university-suffers-huge-email-scam-with-students-told-degrees-revoked/): Western Sydney University has been hit by a major scam after mass emails were sent to students and alumni, including some claiming that degrees had been "revoked". Two different emails appear to have been sent from accounts where students and alumni were falsely told their degrees were no longer valid and that they would be
- [DDoS Cleansing and Alerting](https://security.geant.org/ddos-mitigation-service/): GÉANT DDoS Cleansing and Alerting Supporting GÉANT peering users with dynamic, fast responses to DDoS Distributed Denial of Service (DDoS) is a large and growing problem within the networking community with a large number of NRENs reporting attacks every month. These attacks not only damage live services for users but affect the reputation of the NREN
- [Firewall on Demand](https://security.geant.org/firewall-on-demand/): Firewall on Demand allows authorised users to quickly create and disseminate firewall filters based on traffic flows to or from their designated address space.
- [NeMo DDoS software](https://security.geant.org/nemo-ddos-software/): The NeMo-DDoS software is a powerful tool for Netflow-based DDoS and traffic anomaly detection and analysis. It was originally developed to address NREN-specific network analysis needs and has been enhanced ever since. The software can be obtained and installed locally by GÉANT-associated NRENs to enhance backbone traffic visibility and enable DDoS workflows. NeMo’s key features
- [SOC Tools - Providing NRENs with a baseline toolset for SOC services](https://security.geant.org/soctools/): As the need for SOC operations arose in the NREN community, the GÉANT project created a set of SOC tools which can serve as a starting point for a NREN's SOC.
- [Despite Gains, Ransomware Still Strains Education Sector](https://security.geant.org/despite-gains-ransomware-still-strains-education-sector/): In higher education, Sophos said attackers lean more on weaknesses within institutions’ software, exploiting universities’ security infrastructure. Breaches linked to unpatched technology “penetrated establishments in 35 percent of attacks,” the report said. “Median ransom demands in education fell sharply: From $3.85 million to $1.02 million in lower education, and from $3.55 million to $697,000 in
- [Why Schools and Universities Are Cybercrime Hotbeds](https://security.geant.org/why-schools-and-universities-are-cybercrime-hotbeds/): Educational institutions are particularly vulnerable to cyberattacks because they store a gold mine of sensitive information. If a hacker can access an educational database, they can get personal information, such as social security numbers, names, birth dates, credit card numbers, bank account numbers and a variety of demographic information. Non-personal data, such as funding information
- [Bracknell and Wokingham college hit with cyber attack](https://security.geant.org/bracknell-and-wokingham-college-hit-with-cyber-attack/): The breach affects data used by Activate Learning Bracknell and Wokingham College on Church Road, Bracknell and other educational institutions for Disclosure and Barring Service (DBS) checks.
- [University of Iowa Health Care reports data breach affecting 211,000 individuals](https://security.geant.org/university-of-iowa-health-care-reports-data-breach-affecting-211000-individuals/): University of Iowa Health Care and its affiliate, UI Community HomeCare, disclosed last week that a July cyberattack exposed the personal and health information of more than 211,000 people.
- [Victoria’s Loyola College confirms cyber incident](https://security.geant.org/victorias-loyola-college-confirms-cyber-incident/): A Catholic college resets all staff, student, and parent passwords as the Interlock ransomware gang posts almost 600 gigabytes of stolen data to the dark web, including passports and financial records. “We are currently managing a cyber security incident after our information technology system was compromised by an unauthorised third party. As a result, we
- [Hacktivism Is a Growing Threat to Higher Education](https://security.geant.org/hacktivism-is-a-growing-threat-to-higher-education/): In recent years, colleges and universities have faced an evolving array of cybersecurity challenges. But one threat is showing signs of becoming both more frequent and more politically charged: hacktivism. Hacktivism, or cyberattacks driven by political, ideological, or social motivations, is not new to higher education. In the past decade, campuses have been hit by
- [U.S. Department of Education, Federal Partners Issue Guidance to Help Colleges and Universities Mitigate Foreign Threats to Research](https://security.geant.org/u-s-department-of-education-federal-partners-issue-guidance-to-help-colleges-and-universities-mitigate-foreign-threats-to-research/): Today, the U.S. Department of Education, alongside the Office of the Director of National Intelligence's (ODNI) National Counterintelligence and Security Center (NCSC) and other federal partners issued new guidance in its Safeguarding Academia bulletin to alert U.S. colleges and universities about increasing foreign threats to their research and to arm them with mitigation strategies for
- [Cost of 2023 cyber attack on Munster Technological University rises to €4.2m](https://security.geant.org/cost-of-2023-cyber-attack-on-munster-technological-university-rises-to-e4-2m/): The bill to Munster Technological University (MTU) arising from a February 2023 cyber ransomware attack has risen to €4.2 million. That is a €700,000 increase on the €3.5 million cost put on the attack in the university’s 2023 annual report As a result of the ransomware attack, the MTU Cork campus was closed temporarily following
- [University of St. Thomas, Texas, Still Recovering After 9-Day Outage](https://security.geant.org/university-of-st-thomas-texas-still-recovering-after-9-day-outage/): The University of St. Thomas' online systems are "gradually returning to normal" following a nine-day outage that prevented students and faculty from accessing key resources by the first day of school, the interim president said in an email Thursday. The university community is still waiting for a full explanation, however, and several professors told the
- [No Miracle! The Pontifical Salesian University falls victim to ransomware](https://security.geant.org/no-miracle-the-pontifical-salesian-university-falls-victim-to-ransomware/): On the night of August 19, the IT infrastructure of the Salesian Pontifical University (UPS) was the victim of a serious cyber attack that rendered the University’s website and all digital services temporarily inaccessible. The incident resulted in an immediate shutdown of online activities, causing inconvenience to students, faculty, and administrative staff. We don’t know
- [Is Segmentation Higher Education’s Most Realistic Defense Against Ransomware?](https://security.geant.org/is-segmentation-higher-educations-most-realistic-defense-against-ransomware/): One of the reasons higher education is such a frequent target for cyberattackers is that educational networks are open by design. That’s counter to the zero-trust philosophy but central to the higher education philosophy that promotes collaboration, free thought and transparency. Those things aren’t likely to change anytime soon. So, if higher education networks are
- [Columbia University Data Breach Impacts 860,000](https://security.geant.org/columbia-university-data-breach-impacts-860000/)
- [Attempted hack at University of St. Thomas turns online servers dark days ahead of fall semester](https://security.geant.org/attempted-hack-at-university-of-st-thomas-turns-online-servers-dark-days-ahead-of-fall-semester/): A threat to the University of St. Thomas' servers led the school to shut down some of its systems on Tuesday, cutting students off from their course schedules and financial aid information just days before the start of the semester. The disruption occurred after an unauthorized party tried to hack into the private university in
- [University of Western Australia suffers major data breach, staff and students locked out](https://security.geant.org/university-of-western-australia-suffers-major-data-breach-staff-and-students-locked-out/): The University of Western Australia is investigating a cyber attack that exposed thousands of staff and student passwords. All accounts were locked and passwords reset over the weekend, with no evidence other data was accessed.
- [Global Cyber Attacks Surge 21% in Q2 2025 — Europe Experiences the Highest Increase of All Regions](https://security.geant.org/global-cyber-attacks-surge-21-in-q2-2025-europe-experiences-the-highest-increase-of-all-regions/): In Q2 2025, the global average number of weekly cyber attacks per organization reached 1,984, a 21% increase compared to the same period in 2024 and 58% higher than two years ago. While this growth continues a long-standing trend, a closer look at industry and region-specific data highlights notable patterns, including continued high targeting of
- [Students furious at enrolment, results chaos months after uni hack](https://security.geant.org/students-furious-at-enrolment-results-chaos-months-after-uni-hack/): Students at a major private university say they have been unable to enrol in classes, forced to repeat units and placed at risk of losing their graduate jobs because of online system problems lingering from a cyberattack more than six months ago. Notre Dame University’s 12,000 students and staff lost access to several online platforms
- [Hack attack overturns UFPI systems and affects academic services](https://security.geant.org/hack-attack-overturns-ufpi-systems-and-affects-academic-services/): A cyber attack temporarily brought down several institutional services of the Federal University of Piauí (UFPI). The case was registered around 2:30 p.m. on Saturday (12) and, until this Sunday (13), the systems continue to present instabilities. In a statement, the university reported that technical teams of the Information Technology Superintendence (STI) immediately began diagnostic
- [Himachal Pradesh university's website hacked, homepage shows anti-India remarks briefly](https://security.geant.org/himachal-pradesh-universitys-website-hacked-homepage-shows-anti-india-remarks-briefly/): A senior police officer said two cyber commandos will visit the university on Tuesday to identify the hackers and also understand how the website was hacked. The Himachal Pradesh University's website was hacked with its homepage displaying anti-India remarks and an image, police said on Monday
- [‘Hacktivist’ steals data of 2.5M Columbia University students, employees and applicants in politically motivated cyberattack](https://security.geant.org/hacktivist-steals-data-of-2-5m-columbia-university-students-employees-and-applicants-in-politically-motivated-cyberattack/): A seasoned “hacktivist” reportedly stole sensitive data from more than two million Columbia University students, applicants and employees in a targeted cyberattack officials believe was politically motivated. The sophisticated digital activist, who knocked the Ivy League’s systems offline for several hours on June 24, swiped social security numbers, citizenship status, university-issued ID numbers, application decisions,
- [Columbia University probes possible cyberattack after major website outage disrupts systems](https://security.geant.org/columbia-university-probes-possible-cyberattack-after-major-website-outage-disrupts-systems/): The university said in a statement that it’s working with law enforcement after experiencing an outage affecting its IT systems on its Upper West Side campus and that the school is working to restore services “as quickly as possible.” Columbia’s academic platforms, administrative systems and communication tools have been affected by the outage. A law
- [Feng Chia University targeted by ransomware, says response taken](https://security.geant.org/feng-chia-university-targeted-by-ransomware-says-response-taken/): Feng Chia University was attacked by the emerging NOVA ransomware group, the school has confirmed, and it said that necessary measures have been taken to prevent the damage from escalating. The private university, located in the central Taiwan city of Taichung, said in a statement that it received outside intelligence on Tuesday indicating that it
- [Androxgh0st Botnet Expands Reach, Exploiting US University Servers](https://security.geant.org/androxgh0st-botnet-expands-reach-exploiting-us-university-servers/): CloudSEK’s findings indicate that the botnet has expanded its arsenal of attack vectors by approximately 50% since an earlier report in 2024. A concerning discovery was a command-and-control (C2) logger panel hosted on a subdomain of the University of California, San Diego (“USArhythms”).
- [Cyber roles in education are stabilizing, Educause survey shows](https://security.geant.org/cyber-roles-in-education-are-stabilizing-educause-survey-shows/): A paper published this week by the nonprofit Educause shows that turnover in cybersecurity roles remains low and fewer professionals are planning to leave their departments. The survey found that two-thirds of 141 cybersecurity and privacy professionals working for higher education institutions saw little or no turnover in their departments last year. Only 25% of
- [Jeonbuk National University, Ewha Womans University slapped with surcharges for data leaks](https://security.geant.org/jeonbuk-national-university-ewha-womans-university-slapped-with-surcharges-for-data-leaks/): The Personal Information Protection Commission (PIPC) announced on Thursday that it had decided to slap penalty surcharges of 623 million won ($459,000) on Jeonbuk National University and 343 million won on Ewha Womans University. On July 28, 2024, the personal information of over 320,000 students and graduates of Jeonbuk National University was leaked. The university
- [‘Ghost’ students are hijacking millions from colleges—and locking real human students out of classes](https://security.geant.org/ghost-students-are-hijacking-millions-from-colleges-and-locking-real-human-students-out-of-classes/): Scammers disguised as thousands of fake students are flooding colleges across the U.S. with enrollment applications. The “students” are registering under stolen or fabricated identities, getting accepted to schools, and then vanishing with financial aid and college-minted email addresses that give the fraudsters a veneer of legitimacy.
- [Lewis & Clark College Reaches $500K Settlement Over Data Breach](https://security.geant.org/lewis-clark-college-reaches-500k-settlement-over-data-breach/): A private liberal arts college in Portland, Ore., settled a class-action lawsuit after cyber criminals stole data of employees, students and alumni in 2023, and the college didn't send notifications until a year later.
- [Dutch university’s rapid response saved it from ransomware devastation](https://security.geant.org/dutch-universitys-rapid-response-saved-it-from-ransomware-devastation/): Earlier this year, Eindhoven University of Technology (TU/e), one of the Netherlands’ leading technical universities, demonstrated the uncomfortable truth that even organisations that tick all the cyber security boxes can fall victim to sophisticated attacks, when attackers gained enterprise-level access to its network and began preparing what forensic investigators later concluded would have been a
- [Information on the cyber attack on Sorbonne University](https://security.geant.org/information-on-the-cyber-attack-on-sorbonne-university/): In a general context where many institutions are subject to cyberattacks, Sorbonne University has been the victim of a cyber attack. Its information system is experiencing significant disruptions due to the detection of a security incident that has damaged various digital tools without preventing continuity of service. To address this situation, corrective measures have been
- [College of Eastern Idaho hit by malware attack](https://security.geant.org/college-of-eastern-idaho-hit-by-malware-attack/): The College of Eastern Idaho released a news release on Monday announcing that malware had been introduced into the school’s “network environment” last week. While the school is still working to eliminate the malware from its network, it has not found any evidence of a student or staff data breach. While the CEI Information Technology
- [Cyber security incident at UCLH](https://security.geant.org/cyber-security-incident-at-uclh/): There have been media reports that unauthorised users accessed a UCLH (University College London Hospitals) system in a cyber security incident. We want to reassure all our patients that we have no evidence their data has been accessed. The UCLH system which was compromised contained data about staff mobile devices such as the mobile number
- [Cyber ​​attack on Roma Tre University: ACN and Postal Police intervene](https://security.geant.org/cyber-attack-on-roma-tre-university-acn-and-postal-police-intervene/): A serious cyber attack hit the University's digital infrastructure on the night between May 8 and 9, causing the sudden interruption of the University's online services, including institutional sites and essential platforms for students and teaching staff. According to what was reported by the University itself in an official communication, the first alarm was triggered
- [Interlock ransomware gang deploys new NodeSnake RAT on universities](https://security.geant.org/interlock-ransomware-gang-deploys-new-nodesnake-rat-on-universities/): The Interlock ransomware gang is deploying a previously undocumented remote access trojan (RAT) named NodeSnake against educational institutes for persistent access to corporate networks. QuorumCyber researchers report seeing NodeSnake's deployment in at least two cases targeting universities in the UK in January and March 2025. The two malware samples significantly differ, indicating active development to
- [Checkpoint Academic Security Update - 1Q2025](https://security.geant.org/checkpoint-academic-security-update-1q2025/): Short slidedeck with update from Checkpoint detailing security threats for academia for 1Q2025
- [Massachusetts college student to plead guilty to PowerSchool data breach](https://security.geant.org/massachusetts-college-student-to-plead-guilty-to-powerschool-data-breach/): A Massachusetts college student has agreed to plead guilty to hacking cloud-based education software provider PowerSchool and stealing data pertaining to millions of students and teachers that hackers used to extort the company and school districts into paying ransoms.
- [TU/e hackers had undetected access to the university for days](https://security.geant.org/tu-e-hackers-had-undetected-access-to-the-university-for-days/): The Eindhoven University of Technology (TU/e) published the results of a report to investigate the dynamics of the cyber attack it suffered last January. The analysis, conducted by cybersecurity firm Fox-IT, suggests a ransomware group could be behind the attack, which led to a week-long shutdown of university operations. The hacker used compromised accounts found
- [Together through the storm: How our university withstood the cyberattack](https://security.geant.org/together-through-the-storm-how-our-university-withstood-the-cyberattack/): The cyberattack that struck our university on January 11, 2025, was repelled through quick and vigilant action. The decision to disconnect all internal and external network connections that night significantly impacted our entire community. While our university has returned to normal operations over the past few months, the aftermath resonates within parts of our community.
- [An infamous group of Russian-linked hackers appears to have launched a crippling cyberattack on WNMU](https://security.geant.org/an-infamous-group-of-russian-linked-hackers-appears-to-have-launched-a-crippling-cyberattack-on-wnmu/): For nearly two weeks, Western New Mexico University’s website and digital systems have been held hostage by what officials in internal emails have called the efforts of a “foreign hacking group.” The university has not publicly addressed the severity of the attack, but documentation obtained by Searchlight New Mexico indicates that an infamous Russian-speaking hacking
- [Major Cyberattack Hits Tokai University, Prompting Police Investigation](https://security.geant.org/major-cyberattack-hits-tokai-university-prompting-police-investigation/): Tokai University suffered a significant cyber attack. The attack rendered many systems unusable. It prompted an investigation by the police. The attack was detected on April 17, 2025. Multiple campuses across Japan were affected. Authorities are working to identify the perpetrators.
- [Cyber attack takes U of Brasilia out of the air for three hours](https://security.geant.org/cyber-attack-takes-u-of-brasilia-out-of-the-air-for-three-hours/): On Wednesday morning (9/4), the University of Brasilia (UnB) suffered a hacker attack, which caused the interruption of internet access. The official website and the Wifi of the institution were unavailable for approximately three hours, but then they were reestablished.
- [Tokai University Cyberattack Sparks Investigation By Police](https://security.geant.org/tokai-university-cyberattack-sparks-investigation-by-police/): On April 18, 2025, Tokai University in Hiratsuka City, Kanagawa Prefecture, reported a significant cyberattack that has rendered many of its systems unusable. This incident has prompted the Kanagawa Prefectural Police to launch a full investigation into the cybercrime. The attack was first detected on April 17, 2025, at approximately 6:50 AM when some university-related
- [Cybercriminals are exploiting universities’ weakness in document management](https://security.geant.org/cybercriminals-are-exploiting-universities-weakness-in-document-management/): Universities are under enormous pressure. With rising tuition fees, falling enrollment numbers—with prospective students opting for apprenticeships over student debt—and inflation driving up costs, the last thing they need is a cyberattack caused by outdated legacy systems and poor document management. Unfortunately, this is the reality for many institutions. According to the UK government’s Cyber
- [Western Sydney University apologises as data of 10,000 students accessed in targeted cyber attack](https://security.geant.org/western-sydney-university-apologises-as-data-of-10000-students-accessed-in-targeted-cyber-attack/): About 10,000 students have had their personal information accessed after Western Sydney University was targeted in a cyber attack. The university on Thursday informed its students about the security breach that occurred in January and February of this year. The information accessed relates to demographic, enrolment and progression information.
- ['Reckless:' Federal lawsuit says Lee University waited too long to notify of data breach](https://security.geant.org/reckless-federal-lawsuit-says-lee-university-waited-too-long-to-notify-of-data-breach/): A class action lawsuit filed in federal court in Chattanooga says Lee University in Cleveland waited too long to notify those affected about a data breach that affected their personal information.
- [Fake cyber attack: angry students shut down education](https://security.geant.org/fake-cyber-attack-angry-students-shut-down-education/): ICT organisation SURF carried out its fifth national exercise on cyber security to see what educational institutions and the Ministry of Education, Culture and Science would do if its systems were attacked nationwide. Last week, around 2,000 employees from 90 institutions participated in the exercise, including UU. Such a crisis is not unthinkable: in January,
- [NYU hit with 10 class action lawsuits following data breach](https://security.geant.org/nyu-hit-with-10-class-action-lawsuits-following-data-breach/): NYU is facing 10 class action lawsuits alleging that it mishandled applicants’ personal information and failed to meet national cybersecurity standards after a hacker leaked files with more than 3 million names, hometowns and GPAs on the university’s website last week. The lawsuits, each filed by an individual applicant, claim that NYU’s cybersecurity practices do
- [Hellenic Open University Hit by Cyberattack, 813 GB of Personal Data Leaked on Dark Web](https://security.geant.org/hellenic-open-university-hit-by-cyberattack-813-gb-of-personal-data-leaked-on-dark-web/): The Hellenic Open University (EAP) has confirmed a major cybersecurity breach that occurred on October 25, 2024, resulting in the leak of 813 gigabytes of sensitive data onto the dark web. The stolen information may include personal details such as names, photographs, and IBANs, raising concerns among students and staff. The attack, identified as a
- [NYU website hijacked in protest of ‘affirmative action’ in admissions](https://security.geant.org/nyu-website-hijacked-in-protest-of-affirmative-action-in-admissions/): A bad actor took over New York University’s website over the weekend, exposing the personal information of more than 3 million people who applied to the institution, dating back to 1989. The attack, which took place over the course of two hours last Saturday, was followed by the website being restored around noon, Washington Square
- [Cybersecurity Month 2019 is Here!](https://security.geant.org/cybersecurity-month-2019-is-approaching/): With the holiday season approaching, any given October the internet bristles with advice on how to keep your data safe online and how to stay ahead of the latest trends in cyber crime. Welcome to Cyber Security Month! What is the Cyber Security Month? The Cyber Security Month is a project aiming at raising awareness
- [European Cyber Security Month @ SWITCH](https://security.geant.org/european-cyber-security-month-switch/): SWITCH starts the Cyber Security Month with the Security Awareness Day on October 1st. For the second time, participants working in education, law enforcement and industry are invited to talk and exchange their knowledge about engaging users into information security. In order to show its many facets, the agenda is packed with talks and speakers
- [CLAW 2019 - save the date!](https://security.geant.org/claw-2019-save-the-date/): What do you do when a dragon burns down your data centre? Do you slay the dragon? Do you follow a strict organisation protocol - that you know by heart? Or do you talk to the dragon to find out why he/she decided to burn down your data centre? Brian Nisbet (HEAnet) posed this very
- [CONNECT Interview: Henry Hughes, Security Director, Jisc](https://security.geant.org/connect-interview-henry-hughes-security-director-jisc/): During Cyber Security Month 2020 CONNECT met Henry Hughes, Security Director for Jisc to talk about opportunities and challenges faced by Research & Education (R&E) in the current cyber security landscape dominated by the COVID pandemic. Words: Interview by Rosanna Norman, GÉANT The cyber security landscape is evolving all the time, what are today's major
- [Why having a strong password isn’t enough to secure your account](https://security.geant.org/why-having-a-strong-password-isnt-enough-to-secure-your-account/): By Jon Hunt, cyber services delivery manager at Jisc Criminals always find a way to take advantage of disasters. In the case of COVID-19, there has been a surge in phishing emails and online scams by nefarious individuals and organised gangs who want to steal data. Now, more than ever, it’s important to set strong passwords and
- [Cyber Security Month 2021: campaign planning kick-off](https://security.geant.org/cyber-security-month-2021-campaign-planning-kick-off/): In times when cybercrime keeps evolving and cyber criminals show increased levels of sophistication and opportunism, cybersecurity awareness remains a key and vital factor in the fight against this very contemporary plight. Last year’s Cyber Security Month 2020 (CSM20) campaign, 'Become a Cyber Hero', was very well-received and supported by the international NREN community. The
- [TF-CSIRT is turning 20!](https://security.geant.org/tf-csirt-is-turning-20/): September 2020 marks celebrations for the 20th anniversary of TF-CSIRT, the Task Force facilitating and improving the collaboration in the European community of Computer Security Incident Response Teams (CSIRT). And who is best to tell the story than those who lived it? To mark this special occasion, the TF-CSIRT reached out to some of the
- [Hacker attack on the FHNW – Update](https://security.geant.org/hacker-attack-on-the-fhnw-update/): The GitLab platform is a software development environment with an integrated repository. The FHNW sources SWITCH's GitLab service as a software-as-a-service (managed hosting) solution. The ransomware group "FOG" has copied part of the data (software code) and copied it on 5. March 2025 provided on the Darknet. The University of Applied Sciences Northwestern Switzerland (FHNW)
- [Sorbonne University in Paris claimed by AI-powered Funksec ransomware](https://security.geant.org/sorbonne-university-in-paris-claimed-by-ai-powered-funksec-ransomware/): The Funksec ransomware group – known for deploying what some insiders say is the first GenAI-created ransomware strain – has claimed the historic Sorbonne University in Paris. The group posted the prestigious university on its dark leak site sometime on Friday, claiming to have exfiltrated 20GB of files from its servers. Although the Funksec has
- [How China Pinned University Cyberattacks on NSA Hackers](https://security.geant.org/how-china-pinned-university-cyberattacks-on-nsa-hackers/): Chinese government agencies and private firms attributed cyberattacks aimed at the country’s Northwestern Polytechnical University to the United States’ National Security Agency (NSA) based on IPs, incident timeline, keyboard input, human error, and deployed tools, a security researcher reports.
- [Cyberattack on the University of the Federal Armed Forces Munich](https://security.geant.org/cyberattack-on-the-university-of-the-federal-armed-forces-munich/): The Bundeswehr University in Munich has been battling a cyber attack for three weeks. "According to the current state of knowledge, the attackers have gained access to a central IT service of the data center," confirmed a spokesperson for the Bundeswehr's Cyber and Information Space Command (CIR) on Thursday evening at the request of heise
- [The University of Notre Dame Australia confirms cyber incident](https://security.geant.org/the-university-of-notre-dame-australia-confirms-cyber-incident/): After revealing to ABC News in Western Australia that it may have suffered some form of cyber incident impacting its multifactor authentication service last week, the University of Notre Dame Australia has confirmed its Western Australia campus is investigating a possible cyber attack. “The University of Notre Dame Australia is investigating a cyber incident,” a
- [Phones, email, classes disrupted in University of The Bahamas ransomware attack](https://security.geant.org/phones-email-classes-disrupted-in-university-of-the-bahamas-ransomware-attack/): A ransomware gang has shut down the internet and telephone systems used by the University of The Bahamas, forcing changes on administrators, professors and students. The school, which serves 5,000 students across three campuses, said the attack began on February 2 and impacted all online applications including email platforms and systems used for classwork. All
- [OU isolates systems after ransomware group claims to have employee contacts, state senators’ emails](https://security.geant.org/ou-isolates-systems-after-ransomware-group-claims-to-have-employee-contacts-state-senators-emails/): OU (Oklahoma University) is isolating its network systems due to suspicious activity after the Fog ransomware group claimed to have breached the university’s systems over winter break. The ransomware group is claiming to have exfiltrated 91 megabytes of information consisting of employee contacts, financial data and contact phones and emails of state senators. “The University
- [CLAW 2020](https://security.geant.org/claw-2020/): CLAW 2020 focused on interactive workshops about: Time Management and How to Triage Info; Creative Problem Solving and How to Deal With the Media.
- [Cyberattack forces Dutch university to cancel lectures](https://security.geant.org/news-briefs-news-get-more-insights-with-the-recorded-future-intelligence-cloud-learn-more-cyberattack-forces-dutch-university-to-cancel-lectures/): Eindhoven University of Technology has cancelled “lectures and other educational activities” following a cyberattack, although it is expected to have only a limited impact as teaching is reduced while students prepare for exams. In a statement on Sunday, the Dutch university said it had shut down its network after detecting the attack at around 9
- [TU Eindhoven takes network offline after cyber attack](https://security.geant.org/tu-eindhoven-takes-network-offline-after-cyber-attack/): The incident was first discovered at 9 p.m. Saturday evening. This isn’t a case of a ransomware attack, a spokesperson told Dutch site BN De Stem. There is also no contact with an alleged perpetrator. The university does not expect the systems to be accessible again until Tuesday at the earliest. In the meantime, the
- [Another DDoS attack leaves Dutch universities with little to no internet](https://security.geant.org/another-ddos-attack-leaves-dutch-universities-with-little-to-no-internet/): A “major DDoS attack” is again targeting the joint network of Dutch universities, universities of applied sciences, university hospitals, and research institutes on Friday. The institutions are experiencing “slow or no internet connection,” SURF, the education IT service provider, reported to ANP. The DDoS attack started at around 8:20 a.m. and is affecting institutions spread
- [UWS targeted by Russian cyber gang amid time of financial scarcity for Scottish universities](https://security.geant.org/uws-targeted-by-russian-cyber-gang-amid-time-of-financial-scarcity-for-scottish-universities/): The University of the West of Scotland (UWS) is grappling with a significant financial deficit following a cyber-attack by the Russian hacking group Rhysida, which resulted in the theft of over one million personal documents. In its latest financial report, UWS revealed a £14.4 million deficit for the financial year ending in April 2024, marking
- [Suspicious cyber activity addressed by University of Oklahoma amid Fog ransomware claims](https://security.geant.org/suspicious-cyber-activity-addressed-by-university-of-oklahoma-amid-fog-ransomware-claims/): Officials at the University of Oklahoma disclosed isolating certain systems impacted by suspicious IT network activity after the Fog ransomware gang took responsibility for the intrusion, which it claims resulted in the exfiltration of 91 MB of data, including employee and financial details, according to The Record, a news site by cybersecurity firm Recorded Future.
- [CLAW | The crisis management workshop for the NREN community](https://security.geant.org/claw-workshop/): The CLAW workshop consists of sessions addressing different facets of crisis management, opportunities to share knowledge and a crisis management exercise.
- [Richmond University Medical Center data breach impacted 674,033 individuals](https://security.geant.org/richmond-university-medical-center-data-breach-impacted-674033-individuals/): RUMC disclosed a data breach that potentially involved sensitive files containing personal and health information, including names, Social Security numbers, dates of birth, driver’s license numbers or state identification numbers, other government identification numbers, financial account information, credit or debit card information, biometric information, user credentials, medical treatment/diagnosis information, and/or health insurance policy information.
- [Scottish university posts £14.4m deficit after cyber attack and fall in student numbers](https://security.geant.org/scottish-university-posts-14-4m-deficit-after-cyber-attack-and-fall-in-student-numbers/): Despite a “modest” £2.1m uplift in overall income, the cost of recovering from a cyber attack in 2023, along with other pressures, led to an increase in expenditure of £18.3m compared to the previous year. A criminal ransomware group was said to have been behind the attack, which aimed to use stolen data to extort
- [Ransomware attack at the Fraunhofer for Industrial Engineering](https://security.geant.org/ransomware-attack-at-the-fraunhofer-for-industrial-engineering/): As the Fraunhofer Institute for Industrial Engineering (IAO) in Stuttgart has now announced, it was the target of a ransomware attack on 27 December. The attack led to certain systems and data being compromised. The exact extent of the damage cannot yet be determined. According to current knowledge, it is a local incident that only
- [McMurry University Data Breach Investigation](https://security.geant.org/mcmurry-university-data-breach-investigation/): Recently, McMurry University reported to the Attorney General of Maine that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been accessed and acquired. According to the breach notice, on June 20, 2024, McMurry University became aware of suspicious activity involving its computer network.1 As a result,
- [517 Cyberattacks Targeted Higher Education Institutions in Israel Since October 2023](https://security.geant.org/517-cyberattacks-targeted-higher-education-institutions-in-israel-since-october-2023/): The Israel National Cyber Directorate (INCD) conducted a comprehensive exercise last week at the Academic College of Tel Aviv-Yafo, as part of a nationwide drill for academic institutions in Israel, in collaboration with the Committee of College Heads. INCD data indicates that since the start of the war, approximately 517 cyber incidents have been recorded
- [1.4M records stolen in Texas Tech University Health Sciences Center ransomware attack](https://security.geant.org/1-4m-records-stolen-in-texas-tech-university-health-sciences-center-ransomware-attack/): Some 1.4 million records relating to students, staff and patients at the Texas Tech University’s Health Science Center and El Paso Health Sciences Center have been stolen in an apparent ransomware attack. Officially, the attack is described as a “cybersecurity event” by the university and took place in September. According to a statement from Texas
- [Waverley Christian College confirms cyber incident after ransomware gang claims attack](https://security.geant.org/waverley-christian-college-confirms-cyber-incident-after-ransomware-gang-claims-attack/): The Fog ransomware operation claims to have stolen five gigabytes of data from Waverley Christian College. The school – which has two campuses in Victoria, at Wantirna South and Narre Warren South – was listed as a victim on the gang’s darknet leak site on 16 December.
- [Washington College Approaches Settlement Over Data Breach](https://security.geant.org/washington-college-approaches-settlement-over-data-breach/): Washington College, a private liberal arts college in Kent County, is one step closer to finalizing a settlement after a class action lawsuit over data stolen in a ransomware attack was filed this summer. Documents filed in Anne Arundel County Circuit Court show more than 13,000 people — current and former students and employees of
- [The National Institute for Agricultural Research and Technology Suffers a Cyberattack That Cuts Off Its Headquarters from Internet Access](https://security.geant.org/the-national-institute-for-agricultural-research-and-technology-suffers-a-cyberattack-that-cuts-off-its-headquarters-from-internet-access/): The National Institute for Agricultural and Food Research and Technology (INIA-CSIC) has been dealing with the consequences of a ransomware cyberattack for two weeks, which has left researchers without internet or access to the internal network. Specifically, the attack affected a limited number of servers and workstations and was confined to the organization's headquarters, according
- [Ongoing “major” cyber security incident at Wirral University Teaching Hospital](https://security.geant.org/ongoing-major-cyber-security-incident-at-wirral-university-teaching-hospital/): An ongoing “major incident” has been declared at Wirral University Teaching Hospital “for cyber security reasons”, with a spokesperson sharing that all outpatient appointments scheduled for today have been cancelled, and urging the public not to attend A&E unless in the case of a “genuine emergency”.
- [University of Algarve hit by cyberattack](https://security.geant.org/university-of-algarve-hit-by-cyberattack/): The University of Algarve (UAlg) has confirmed that hackers targeted its academic management system between November 14 and 19, stealing personal data from members of its academic community. The university was only able to end the cyberattack on the evening of November 19 with a software update. While classes and research continued uninterrupted, the breach
- [How the British Library cyberattack disrupted research](https://security.geant.org/how-the-british-library-cyberattack-disrupted-research/): Academics who rely on the British Library’s unmatched collection are still feeling the impact of a devastating cyberattack a year ago. Jack Grove hears from those affected and considers how another catastrophic breach might be averted
- [Security Bootcamp for UbuntuNet Alliance NRENs](https://security.geant.org/security-bootcamp-for-ubuntunet-alliance-nrens/): Security Bootcamp for UbuntuNet Alliance NRENs: Hands-on training brought together key representatives from the UbuntuNet Alliance and its member NRENs.
- [UK Researchers Uncover 12 Critical Security Flaws in Widely Used Educational Lab Software](https://security.geant.org/uk-researchers-uncover-12-critical-security-flaws-in-widely-used-educational-lab-software/): In a major advancement towards securing UK educational bodies from cyber attacks, the Pentester Stream Lab, alongside students from the Cyber Metropolitan Community at London Metropolitan University, has uncovered several critical vulnerabilities in a widely used third-party laboratory management service. This foreign-made product is extensively utilized in schools and colleges across the globe, including the
- [China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload](https://security.geant.org/china-linked-group-hacked-tibetan-media-and-university-sites-to-distribute-cobalt-strike-payload/): A China-linked state hacker group has compromised Tibetan media and university websites in a new espionage campaign, researchers have found — part of a series of attacks targeting the Tibetan community in order to collect intelligence for Beijing. The websites of the digital news outlet Tibet Post and Gyudmed Tantric University were hacked in late
- [210,000 Impacted by Saint Xavier University Data Breach](https://security.geant.org/210000-impacted-by-saint-xavier-university-data-breach/): Saint Xavier University last week started notifying over 210,000 individuals that their personal information was compromised in a data breach in July 2023. The incident was discovered on July 21, 2023, but the investigation into the matter revealed that the unauthorized access to the university’s systems occurred weeks before. Between June 29 and July 18,
- [Cyberattack disrupts classes at Irish technology university](https://security.geant.org/cyberattack-disrupts-classes-at-irish-technology-university/): The South East Technological University (SETU) in Ireland has announced experiencing a cybersecurity incident targeting its IT systems. In a statement on SETU’s website, students were advised that classes at its Waterford campuses would be postponed so academics could plan around the disruption. The nature of the attack has not been announced.
- [Blackburn College targeted in "cyber security incident"](https://security.geant.org/blackburn-college-targeted-in-cyber-security-incident/): On Monday, October 28, the further education centre was targeted, causing issues with the IT network and access to its systems. The college has said that they are dealing with the situation and are communicating with both staff and students – after concerns arose regarding potential data breaches. A spokesperson for Blackburn College said: “We
- [Biola and cyber-attacks](https://security.geant.org/biola-and-cyber-attacks/): On Sept. 20, students and employees were alerted via an email from Steve Earle, chief information officer of the Information Technology (IT) department, that they might have been targets of a wave of phishing attacks. The email warned students about the phishing attack that appeared as an email seemingly advertising job openings at Biola. This
- [Western Sydney University suffers cyber attack, personal data compromised](https://security.geant.org/western-sydney-university-suffers-cyber-attack-personal-data-compromised/): The university discovered the breach almost two weeks later on August 27, and by August 31, the access was “contained.” Now, the University has announced that its investigations have unveiled that personal data was accessed in the incident including “names, addresses, University-issued email addresses, student identification numbers, tuition fee information (including fees deferred to HELP/HECS),
- [Penn State pays DoJ $1.25M to settle cybersecurity compliance case](https://security.geant.org/penn-state-pays-doj-1-25m-to-settle-cybersecurity-compliance-case/): Pennsylvania State University has agreed to pay the Justice Department $1.25 million to settle claims of misrepresenting its cybersecurity compliance to the federal government and leaving sensitive data improperly secured.
- [Biggest Education Industry Attacks in 2024](https://security.geant.org/biggest-education-industry-attacks-in-2024/): The education sector is increasingly becoming a top target for cybercriminals, with a noticeable rise in cyberattacks aimed at schools and universities throughout 2024. As institutions continue their digital transformation and integrate more technology into classrooms, they expose themselves to new security threats.
- [Lansing Community College reaches $1.45M settlement over data breach affecting 750,000 individuals](https://security.geant.org/lansing-community-college-reaches-1-45m-settlement-over-data-breach-affecting-750000-individuals/): Lansing Community College (LCC), a public community college located in Michigan, has agreed to a $1.45 million settlement in response to a class action lawsuit alleging the school failed to protect the personal information of employees, vendors, and current, former, and prospective students.
- [Spate of ransomware attacks on German-speaking schools hits another in Switzerland](https://security.geant.org/spate-of-ransomware-attacks-on-german-speaking-schools-hits-another-in-switzerland/): The ransomware attack on the BBZ follows another on the University of Zurich, Switzerland’s largest university, last year that was described as “part of a current accumulation of attacks on educational and health institutions.” The wave of hacks targeting German-speaking institutions includes incidents impacting the Frankfurt University of Applied Sciences and Hochschule Kempten earlier this
- [Rising cybersecurity threats target U.S. higher education institutions](https://security.geant.org/rising-cybersecurity-threats-target-u-s-higher-education-institutions/): With nearly 6,000 higher education institutions housing vast amounts of sensitive data—ranging from personal information to research with national security implications—colleges and universities have become prime targets for cybercriminals and nation-state actors. Limited resources and complex IT systems, however, have left these institutions increasingly vulnerable to attacks,...
- [Education under siege: How cybercriminals target our schools​​](https://security.geant.org/education-under-siege-how-cybercriminals-target-our-schools/): The cyberthreats that Microsoft observes across different industries tend to be compounded in education, and threat actors have realized that this sector is inherently vulnerable. With an average of 2,507 cyberattack attempts per week, universities are prime targets for malware, phishing, and IoT vulnerabilities.
- [FileSender Vulnerability Poses Risk to User Credentials](https://security.geant.org/filesender-vulnerability-poses-risk-to-user-credentials/): A severe security flaw has been identified in FileSender, the popular web-based application that allows authenticated users to securely send large files. The vulnerability, classified as CVE-2024-45186, was discovered by security researcher Jonathan Bouman. This server-side template injection vulnerability allows non-authenticated users to retrieve server credentials, putting sensitive data and systems at risk. FileSender’s vulnerability
- [Ongoing cyberattack on the University of Reims Champagne-Ardenne](https://security.geant.org/ongoing-cyberattack-on-the-university-of-reims-champagne-ardenne/): In an email sent to the students we were able to consult, the university explains that its website “is currently undergoing a massive attack on Bots. The purpose of this offensive is to saturate our systems, seriously compromising the site's ability to process queries and paralyzing its operation." According to our findings, the site does
- [Median payments for ransomware attacks by schools exceed $4m](https://security.geant.org/median-payments-for-ransomware-attacks-by-schools-exceed-4m/): Sophos, a global leader in cybersecurity, has released findings from its annual sector survey report, “The State of Ransomware in Education 2024.” The report revealed that educational organisations are increasingly falling victim to ransomware attacks, with many paying exorbitant ransoms and facing significant disruptions. According to the report, the median ransom payment was $6.6 million
- [Remote trigger blackhole](https://security.geant.org/remote-trigger-blackhole/): Remote Trigger to Blackhole - All European NRENs can use BGP community 20965:0008 to advertise single IPv4 or IPv6 destination addresses from within their administrative IP space to GÉANT to discard any traffic on GÉANT borders in the case of a severe D(D)oS attack. Once again, alternatively, NREN can open a ticket with GOC to
- [CLAW 2017](https://security.geant.org/claw-2017/): CLAW 2017: 40 representatives from 20 NRENs met in Malaga for the first ever CLAW crisis management workshop organised by GÉANT.
- [CLAW 2018](https://security.geant.org/claw-2018/): Is your organisation prepared for a cyber crisis? Do you have crisis management procedures? To help answer these questions (and more), join us at CLAW 2018!
- [CLAW 2021](https://security.geant.org/claw-2021/): Community representatives from Communications, NOC, CSIRT and Information Security Management were welcomed at CLAW 2021, to work together in training sessions .
- [Security Awareness](https://security.geant.org/security-awareness/): GÉANT aims to provide security awareness insights, while pointing out where to get support and what is most crucial in the fight against cybercrime.
- [UCU hit by cyberattack](https://security.geant.org/ucu-hit-by-cyberattack/): UK’s University and College Union “investigating as priority” after “criminal group” claims to take data The University and College Union said it has fallen victim to a “cyber incident”, with the union “investigating as a matter of priority” after a “criminal group” claimed to have taken data. When contacted by Research Professional News, the UCU
- [Library cyberattack leaves no student or employee data compromised](https://security.geant.org/library-cyberattack-leaves-no-student-or-employee-data-compromised/): A cyberattack on University of New Mexico Libraries that began on July 31 resulted in no compromised data for students or employees, according to Mark Emmons, associate dean of the College of University Libraries and Learning Sciences. Publicly accessible resources were mostly available by the start of the semester, according to Emmons, while issues accessing
- [Educational Institutions become a prime target for cybercriminals as the new academic year commences](https://security.geant.org/educational-institutions-become-a-prime-target-for-cybercriminals-as-the-new-academic-year-commences/): According to a recent report by NordLayer, cyberattacks targeting educational institutions have increased by 37% compared to last year.
- [Swinburne University confirms its Sarawak Campus has been hacked](https://security.geant.org/swinburne-university-confirms-its-sarawak-campus-has-been-hacked/): The Swinburne University of Technology Sarawak Campus has been listed as a victim on the RansomHub ransomware gang’s dark web leak site. The Sarawak Campus was listed over the weekend on 30 August, with the gang – or, more accurately, the gang’s affiliate, as the group is a known ransomware-as-a-service operation – claiming to have
- [Paris-Saclay University victim of a cyberattack](https://security.geant.org/paris-saclay-university-victim-of-a-cyberattack/): The University of Paris-Saclay was the victim of a ransomware cyberattack on Sunday , the prestigious institution said, its website being inaccessible on Tuesday. The cyberattack on the university was detected a week after another ransomware attack that targeted the Grand Palais in Paris, where Olympic Games events were taking place, and around forty French
- [DOJ joins suit against Georgia Tech over cybersecurity failures with Defense Department](https://security.geant.org/doj-joins-suit-against-georgia-tech-over-cybersecurity-failures-with-defense-department/): The Justice Department said it joined a whistleblower lawsuit over claims that the Georgia Institute of Technology shirked its cybersecurity obligations in contracts with the U.S. Department of Defense. U.S. prosecutors tore into Georgia Tech’s allegedly flagrant disregard for federal cybersecurity rules that came as part of billions of dollars worth of Department of Defense
- [Copiah-Lincoln Community College Data Breach Affects 53,628 People](https://security.geant.org/copiah-lincoln-community-college-data-breach-affects-53628-people/): On August 13, 2024, Copiah-Lincoln Community College (“Copiah-Lincoln”) filed a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party was able to access confidential information in the school’s possession. In this notice, Copiah-Lincoln explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive
- [Hackers deployed new malware against university in Taiwan](https://security.geant.org/hackers-deployed-new-malware-against-university-in-taiwan/): Researchers have uncovered a previously unseen backdoor which was used in an attack on a university in Taiwan. To infect their victims, the malware operators likely exploited a recently patched PHP vulnerability tracked as CVE-2024-4577, according to researchers at the cybersecurity firm Symantec. The vulnerability primarily affects Windows installations using Chinese and Japanese languages.
- [Security Bootcamp](https://security.geant.org/securitybootcamp/): The Security Bootcamp is an innovative programme that aims to provide hands-on experience and training sessions to National Research and Education Networks.
- [Western Sydney University cyber incident](https://security.geant.org/western-sydney-university-cyber-incident/): Since unauthorised access to Western Sydney University’s IT network was discovered in January 2024, the University has been undertaking forensic investigations in line with our due diligence and legal obligations to determine the full nature, scope and scale of the incident. As a result of the ongoing investigations, the University issued this public notification on
- [University Professors Targeted by North Korean Cyber Espionage Group](https://security.geant.org/university-professors-targeted-by-north-korean-cyber-espionage-group/): The North Korea-linked threat actor known as Kimsuky has been linked to a new set of attacks targeting university staff, researchers, and professors for intelligence gathering purposes. Cybersecurity firm Resilience said it identified the activity in late July 2024 after it observed an operation security (OPSEC) error made by the hackers.
- [New Jersey City University hit by ransomware](https://security.geant.org/new-jersey-city-university-hit-by-ransomware/): New Jersey City University, a public school that enrolls 6,500 students, has been hit by ransomware and has until Saturday to pay $700,000 in bitcoin or risk having its sensitive data published online. The cyberattack occurred between June 4 and June 10, but the university only notified staff and students last Friday, The Jersey Journal
- [NWACC network remains down after potential ransomware attack](https://security.geant.org/nwacc-network-remains-down-after-potential-ransomware-attack/): The Northwest Arkansas Community College (NWACC) experienced a cyber threat, the college announced on Wednesday. The cyber threat was detected by the college's team on the morning of July 30, leading to the immediate, intentional shutdown of the college's tech network.
- [GÉANT Security Bootcamps: Strengthening Cybersecurity for R&E](https://security.geant.org/strengthening-cybersecurity-for-re/): Strengthening Cybersecurity for R&E | GÉANT’s Partner Relations and Security teams organised meetings with CISOs and representatives from European NRENs.
- [eduVPN](https://security.geant.org/vpn-services/): Increased pri​​vacy and control - helping to build effective virtual teams across borders. Many research projects require the additional security and reassurance of a virtual private network (VPN) to ensure data services are isolated from general IP (internet protocol) traffic. eduVPN extends a private network across a public network and enables users to send and
- [U-Michigan cyberattack compromised Michigan Medicine patient data of 56,000 people](https://security.geant.org/u-michigan-cyberattack-compromised-michigan-medicine-patient-data-of-56000-people/): The personal information of more than 56,000 people — including names, medical record numbers, addresses, dates of birth, diagnostic and treatment information, and health insurance details — was compromised in a cyberattack at Michigan Medicine, the academic medical center of the University of Michigan.
- [Laurentian University confirms February ‘cyber incident’ was a ransomware attack](https://security.geant.org/laurentian-university-confirms-february-cyber-incident-was-a-ransomware-attack/): The February incident that devastated Laurentian University’s IT systems was a ransomware attack, the school said in response to a freedom of information request from CTV News Northern Ontario. “The university received a ransom demand,” the school said in a letter dated July 12. “The university did not pay a ransom.”
- [TF-CSIRT: Computer Security Incident Response Teams](https://security.geant.org/tf-csirt-computer-security-incident-response-teams/): TF-CSIRT provides a forum where members of the CSIRT community from the R&E networking community and other sectors, exchange knowledge in a trusted environment.
- [University of Indonesia Denies Data Breach of Center for Independent Learning](https://security.geant.org/university-of-indonesia-denies-data-breach-of-center-for-independent-learning/): The University of Indonesia or UI denied that the Center for Independent Learning (CIL) data was hacked and sold on BreachForums as reported by the cybersecurity company FalconFeeds.io on social media platform X. Head of the university’s Public Relations and Public Information Openness (KIP) Bureau Amelita Lusia said she received many questions regarding the data
- [Frankfurt University Faces Major Cyberattack, IT Systems Disabled](https://security.geant.org/frankfurt-university-faces-major-cyberattack-it-systems-disabled/): “Despite very high-security precautions, the criminals managed to gain access to parts of the university’s IT infrastructure. As an immediate security measure, external access to our IT systems was blocked and some services were switched off. The communications infrastructure was also restricted. In addition, the police and the relevant authorities were called in,” read the
- [New ‘Pryx’ Ransomware Hijacked 30,000 University Applications](https://security.geant.org/new-pryx-ransomware-hijacked-30000-university-applications/): Pryx has claimed its first attack, announcing that it has compromised the systems of Rowan College at Burlington County (RCBC.edu) and stolen 30,000 university applications.
- [GÉANT Security Days](https://security.geant.org/securitydays2024/): The first edition of our conference GÉANT Security Days took place in April 2024 in Prague, Czech Republic. The event aimed to bring together under one roof security professionals and individuals with an interest in security from across the international research and education community, including NRENs, universities, infrastructures, higher education and research institutions. The theme for
- [Cambridge University Press & Assessment Ends Up in the DLS of INC Ransomware](https://security.geant.org/cambridge-university-press-assessment-ends-up-in-the-dls-of-inc-ransomware/): In a recent cyberattack, the cybercriminal group known as “INC Ransomware” declared that they had breached the systems of Cambridge University Press & Assessment, employing a double extortion strategy. This tactic, increasingly common among ransomware groups, involves the theft and encryption of the victim’s data, followed by the threat of publicly disclosing the data if
- [CUHK Data Breach: Hacked Server Impacts Over 20,000 Students and Staff at Hong Kong University](https://security.geant.org/cuhk-data-breach-hacked-server-impacts-over-20000-students-and-staff-at-hong-kong-university/): The Chinese University of Hong Kong (CUHK) has been confronted by a massive data breach that has compromised personal information of precisely 20,870 students, staff and past graduates. The investigation revealed that the school’s “Moodle learning management system” was hacked. Despite the university management stating that the sensitive data was not leaked on any public
- [Cyberattacks are hitting research institutions — with devastating effects](https://security.geant.org/cyberattacks-are-hitting-research-institutions-with-devastating-effects/): Hackers are targeting universities and research institutes with ransomware, leaving staff and students without the ability to work. For hackers, academic institutions are desirable targets for two reasons: some have deep pockets from which to pay a ransom, and they contain valuable data that can be sold such as employee records and intellectual property linked
- [Cyberattacks on Higher Ed Rose Dramatically Last Year, Report Shows](https://security.geant.org/cyberattacks-on-higher-ed-rose-dramatically-last-year-report-shows/): The Malwarebytes annual threat report calls 2023 “the worst ransomware year on record” after attacks spike by 70 percent. Two ransomware gangs were behind much of the increase, Malwarebytes concludes, with LockBit and Rhysdia, formerly known as Vice Society, responsible for more than 100 attacks. The five most active gangs accounted for 81 percent of
- [Grenfell campus shutting down internet for 2 weeks to deal with lingering effects of cyberattack](https://security.geant.org/grenfell-campus-shutting-down-internet-for-2-weeks-to-deal-with-lingering-effects-of-cyberattack/): Nearly six months after a cyberattack on Memorial University's Grenfell campus, the Corner Brook institution is shutting down its internet for more than two weeks in an effort to fix lingering issues.
- [California Northstate University sued for data breach. It’s the latest of lawsuits against it](https://security.geant.org/california-northstate-university-sued-for-data-breach-its-the-latest-of-lawsuits-against-it/): The lawsuit, filed April 29 in federal court, alleged that a ransomware group in February 2023 stole W-2 tax forms from former professor Erika Titus-Lay as well as from thousands of former and current employees and students. The lawsuit alleged Titus’ W-2 was published on the dark web, and that cybercriminals filed a fraudulent tax
- [Email hack may have exposed University of Chicago Medical Center patient information](https://security.geant.org/email-hack-may-have-exposed-university-of-chicago-medical-center-patient-information/): About 10,300 people, including patients, their family members and others who received care from the medical center may have been impacted, according to a memo the hospital sent to employees.
- [Hackers Breached Western Sydney University Microsoft 365 & Sharepoint Environments](https://security.geant.org/hackers-breached-western-sydney-university-microsoft-365-sharepoint-environments/): Western Sydney University has informed approximately 7,500 individuals today of an unauthorized access incident involving its IT network. The breach, first identified in January 2024, affected the University’s Microsoft Office 365 environment, including email accounts and SharePoint files.
- [EU wants universities to work with intelligence agencies to protect their research](https://security.geant.org/eu-wants-universities-to-work-with-intelligence-agencies-to-protect-their-research/): Europe’s leading research universities should work more closely with the continent’s intelligence agencies to help secure their research from being stolen by hostile states, EU member states recommended this week. A recommendation adopted by EU member states on Thursday aims to “address research security risks deriving from international cooperation,” and highlights the sensitivities around frontier
- [University of Siena Cyberattack: LockBit Claims Responsibility, Sets Deadline](https://security.geant.org/university-of-siena-cyberattack-lockbit-claims-responsibility-sets-deadline/): The University of Siena, a distinguished Italian academic institution established in 1240, is currently grappling with a significant cybersecurity incident. The LockBit 3.0 ransomware group has claimed responsibility for the attack that has disrupted multiple university services, leading to the temporary suspension of its systems.
- [The university targeted by a cyber attack, an example of modern “piracy”](https://security.geant.org/the-university-targeted-by-a-cyber-attack-an-example-of-modern-piracy/): The University of Guyana was targeted by a cyber attack on Monday, April 13. Data has been lost, and the website is out of order. At the initiative of this attack, a group, FOG. This type of attack has been on the rise in recent years, and the French state is looking for effective solutions
- [After ransomware attack: data leaked from police academy in Hesse](https://security.geant.org/after-ransomware-attack-data-leaked-from-police-academy-in-hesse/): In a ransomware attack on the Hessian University of Applied Sciences for Public Management and Security (HöMS) in February, criminals downloaded sensitive data from employees, lecturers and students. Data from the predecessor institution, the Hessian University of Applied Sciences for Police and Administration (HfPV), was affected.
- [Pupils miss classes as school cyber attacks rise](https://security.geant.org/pupils-miss-classes-as-school-cyber-attacks-rise/): Staff at Brockington College, in Leicester, were first alerted to the breach when they saw their mouse cursors moving remotely across their screens, with files already open on the computers, when they first logged on at the start of the school day.
- [Cyberattack Paralyzes 4 Quebec CEGEPs: Classes and Exams Cancelled](https://security.geant.org/cyberattack-paralyzes-4-quebec-cegeps-classes-and-exams-cancelled/): A recent Cégep de Lanaudière cyberattack has paralyzed the education system, causing classes to grind to a halt and prompting exam cancellations, affecting around 7,000 students. The assailant, targeting the college network’s servers, rendered Omnivox inaccessible – the primary digital platform for both faculty and student communication. Students logging into Omnivox were met with a
- [University System Georgia confirms MOVEit hack impacted 800K](https://security.geant.org/university-system-georgia-confirms-moveit-hack-impacted-800k/): University System of Georgia, which manages the state's higher education institutions, disclosed that 800,000 individuals across the state had their information compromised in late May as a result of the widespread MOVEit file transfer system hack conducted by the Cl0p ransomware operation, The Register reports. Infiltration of USG's systems may have facilitated the exfiltration of
- [Thousands affected by cyber attack on HK college](https://security.geant.org/thousands-affected-by-cyber-attack-on-hk-college/): Over 8,000 students of a private vocational college have been affected by a cyber attack, the privacy watchdog said on Friday. The Hong Kong College of Technology said its information technology network and file server were hacked in February. A ransomware group is believed to have got hold of 450GB of the college's data and
- [Umeå University is the subject of a major cyberattack](https://security.geant.org/umea-university-is-the-subject-of-a-major-cyberattack/): On May 2, ITS detected an ongoing cyberattack against the University. Extra protective measures have been taken resulting in some disruption to systems and digital tools used by university staff and students.
- [Let’s talk about Security!](https://security.geant.org/lets-talk-about-security/): Security Day 2021 took place online on Monday 14 June, launching the series of TNC21 side meetings! Around 85 attendees joined a full day of discussions, workshops and briefings on the latest security developments for Research & Education. The main objective of the one-day event was to share progress and achievements, look at new ways
- [SWITCH Security Awareness Day 2020](https://security.geant.org/switch-security-awareness-day-2020/): The SWITCH Security Awareness Day aims to give insights into the different ways to deal with security awareness while pointing out where to get support.
- [CLAW2020 goes digital. Register today](https://security.geant.org/claw2020-goes-digital-register-today/): No other year has shown how important crisis management preparation is as 2020. We have all had to deal with an ongoing crisis, which asked for a huge amount of creativity, mental resilience and patience. Maybe some of you are already completely done with the concept of crisis. However, now is also a great time
- [TNC Sponsor Webinar: Don’t be a victim. Ransomware can be beaten!    10/05/21 16:00 CEST](https://security.geant.org/tnc-sponsor-webinar-dont-be-a-victim-ransomware-can-be-beaten-10-05-21-1600-cest/): Orange CyberDefense: TNC Sponsor Webinar: Don’t be a victim. Ransomware can be beaten!
- [Lee University contains recent cyber security breach as investigation continues](https://security.geant.org/lee-university-contains-recent-cyber-security-breach-as-investigation-continues/): Lee University became aware of a potential security incident early Friday morning, March 22, 2024. With assistance from external resources, Lee University’s IT team took immediate measures to contain the suspected incident and secure Lee’s environment. Classes have continued as scheduled. The investigation is still ongoing, and we are unable to share specific information on
- [Lewis & Clark College faces class action lawsuit over 2023 data breach](https://security.geant.org/lewis-clark-college-faces-class-action-lawsuit-over-2023-data-breach/): Lewis & Clark College is facing a class action lawsuit filed by a former employee, alleging the school failed to protect student and employee data from a 2023 cybersecurity breach, and says the school failed to notify those impacted in a timely manner, according to court documents. The complaint, filed April 10 — as reported
- [Universities in New Mexico, Oklahoma respond to ransomware attacks](https://security.geant.org/universities-in-new-mexico-oklahoma-respond-to-ransomware-attacks/): East Central University in Ada, Oklahoma, announced this week that it is investigating a ransomware attack that took place in February. The school released multiple advisories saying that while the attack was largely unsuccessful — taking down only a few campus computers — the hackers were still able to access significant amounts of student information
- [Ransomware Attack Hits New Mexico Highlands University](https://security.geant.org/ransomware-attack-hits-new-mexico-highlands-university/): On the morning of April 3, Highlands' information technology department detected a potential threat to the server hosting the university's MyNMHU Portal, through which students and staff can access essential services like online classes, course materials, campus email, classroom technology and payroll systems, Lepre said. To isolate the potential attack, university tech officials took the
- [Pondicherry University website hacked for 'making fun' of Lord Ram during play](https://security.geant.org/pondicherry-university-website-hacked-for-making-fun-of-lord-ram-during-play/): The website of the central government-run Pondicherry University has allegedly been attacked by a group of Indian hackers for "insulting Ramayana" and "making fun" of Lord Ram during a play staged on the campus last week. They claimed to have thrown the official website out of service in a suspected DDoS (distributed denial of service)
- [Personal information of thousands, including SINs and bank info, likely exposed in cyberattack: U of Winnipeg](https://security.geant.org/personal-information-of-thousands-including-sins-and-bank-info-likely-exposed-in-cyberattack-u-of-winnipeg/): Personal data from potentially thousands of students and staff was stolen in a cyberattack late last month, the University of Winnipeg says. The names, social insurance numbers, birth dates and addresses of former and current students and school employees have likely been exposed to the attackers, the university said in a Thursday news release. The
- [Cyberattack disruption lingers at Cambridge University](https://security.geant.org/cyberattack-disruption-lingers-at-cambridge-university/): The University of Cambridge's Clinical School Computing Service (CSCS) fell victim to a cyberattack in February, leaving hundreds of researchers and staff unable to access important systems for the past five weeks. The attack, characterised by the university as "malicious activity," has prompted proactive measures in response, including voluntarily shutting down some systems.
- [FMU hit by widespread cyberattack](https://security.geant.org/fmu-hit-by-widespread-cyberattack/): Florida Memorial University (FMU), South Florida’s only historically Black college or university, has reportedly fallen victim to a cybersecurity breach by the ransomware group known as INC Ransom. The specifics of the data compromised during this incident remain uncertain, and the university has yet to issue a formal statement regarding the breach.
- [Cambridge university medical IT system targeted by hackers](https://security.geant.org/cambridge-university-medical-it-system-targeted-by-hackers/): Hundreds of researchers at the University of Cambridge have been unable to access a computer system because of so-called "malicious activity". The problem was found five weeks ago on its Clinical School Computing Service, used for high profile medical studies. The university said there was no evidence any data had been taken and the incident
- [Higher Education Institutions Are Using Firewall as a Service to Enhance Security](https://security.geant.org/higher-education-institutions-are-using-firewall-as-a-service-to-enhance-security/): Cybercriminals are increasingly targeting higher education institutions. Ransomware attacks in the sector, for instance, were up 70 percent in 2023, according to a report from Malwarebytes. And a Sophos survey suggests that the average recovery cost can top $1 million per incident. In recent years, as cyberattacks have become more nuanced, the firewall technology that
- [University of Winnipeg paralyzed by cyber incident](https://security.geant.org/university-of-winnipeg-paralyzed-by-cyber-incident/): Weeks before exams are set to begin, students and faculty at one of Manitoba’s largest universities are scrambling to access academic files after a weekend “cyber incident” knocked out network access and forced the institution to cancel classes. Campus phones, electronic doors and a suite of Microsoft 365 programs were operational, but access to the
- [Opinion: How Higher Ed Should Tackle the Data Security Crisis](https://security.geant.org/opinion-how-higher-ed-should-tackle-the-data-security-crisis/): Data breaches in higher education institutions have led to significant adverse outcomes, such as the loss of funding and student fees and the illegal seizure of intellectual property assets. The financial implications of data breaches at colleges and universities are also substantial. According to IBM’s 2023 report on the cost of data breaches, the average
- [Viewpoint: Trojan Academics or why western universities are a valuable source for Russia’s covert operations](https://security.geant.org/viewpoint-trojan-academics-or-why-western-universities-are-a-valuable-source-for-russias-covert-operations/): In the wake of an espionage scandal, a former vice rector of the University of Tartu examines how universities across the EU have become targets in Russia’s hybrid war - and how they should defend themselves. We need to reassess our situational awareness. Originally a national defence term, situational awareness involves having a comprehensive grasp
- [Stanford University says logins “with passwords” stolen in 2023 breach](https://security.geant.org/stanford-university-says-logins-with-passwords-stolen-in-2023-breach/): Almost six months after it discovered that cybercriminals had been inside its network for more than four months, prestigious US institution Stanford University has published an update about the breach.
- [Israeli Universities Hit by Supply Chain Cyberattack Campaign](https://security.geant.org/israeli-universities-hit-by-supply-chain-cyberattack-campaign/): The self-styled Lord Nemesis group boasted online that it used credentials snatched from Rashim Software to break into the systems of the vendor's clients, universities, and colleges in Israel. The hack-and-leak operation began on or around November 2023, according to Op Innovate, an incident response firm that assisted one of the victim universities. According to
- [Top US university data for sale on dark web](https://security.geant.org/top-us-university-data-for-sale-on-dark-web/): The universities in question include various Ivy League schools, such as Princeton University and Stanford University, along with the University of Chicago and Duke University. The threat actor, whose alias on the site is ‘Ynnian,’ has titled the post “University Databases” uchicago.edu/ duke.edu / princeton.edu / stanford.edu. The post features a long leak date from
- [Rio Hondo Community College Announces Data Breach in the Wake of Ransomware Attack](https://security.geant.org/rio-hondo-community-college-announces-data-breach-in-the-wake-of-ransomware-attack/): On February 27, 2024, Rio Hondo Community College District (“Rio Hondo”) filed a notice of data breach with the Attorney General of California after experiencing a ransomware attack in October 2023. The Rio Hondo Community College data breach was only recently announced, and more information is expected in the near future. However, Rio Hondo’s filing
- [Willamette University recovering from cyberattack that followed its Tech Day](https://security.geant.org/willamette-university-recovering-from-cyberattack-that-followed-its-tech-day/): That evening, university officials discovered suspicious network activity that subsequently turned out to be a major cyberattack. The university’s website was down. Phones didn’t work. The wifi network went off. Its Portland campus, the Pacific Northwest College of Art, also was impacted. More than a week later, many systems have been restored but university officials
- [Richland Community College Struggling After Cyber Attack](https://security.geant.org/richland-community-college-struggling-after-cyber-attack/): In a news release Thursday, Richland Community College revealed it's still suffering from the effects of some kind of cyber attack that has knocked out its phones and caused significant problems. The college said it had experienced a "network security incident" on Feb. 17 that "caused a disruption to our systems," according to the statement.
- [Increase in Cyberattacks Targeting UK Universities, Survey Finds](https://security.geant.org/increase-in-cyberattacks-targeting-uk-universities-survey-finds/): A survey involving 52 higher education institutions conducted by the Department for Science, Innovation, and Technology (DSIT) in April 2023 found that all types of institutions were more likely to be cyberattacked than the average of UK companies, the report notes. According to the results, phishing is the most common form of cyberattack against higher
- [Ghosts of Palestine Launches Cyberattack on Israeli Universities in Protest](https://security.geant.org/ghosts-of-palestine-launches-cyberattack-on-israeli-universities-in-protest/): The hacktivist group Ghosts of Palestine has claimed responsibility for the cyberattack on Israeli universities targeting prominent educational institutions. The list of targets includes the Weizmann Institute of Science, Tel Aviv University, Hebrew University of Jerusalem, Technion Israel Institute of Technology, Ben Gurion University, University of Haifa, and Bar Ilan University.
- [Hackers target Zurich university with ‘professional’ cyberattack](https://security.geant.org/hackers-target-zurich-university-with-professional-cyberattack/): The university said on Friday that it is battling to keep the hackers out of critical zones by isolating parts of its IT system. The Swiss authorities have been alerted, along with students and employees who have been advised to change their passwords. “The perpetrators appear to be acting in a very professional manner and
- [Laurentian University Battles Cyber Attack: Impact and Recovery Efforts Unfold](https://security.geant.org/laurentian-university-battles-cyber-attack-impact-and-recovery-efforts-unfold/): Laurentian University has been grappling with a significant cyber attack since February 18, marking a concerning addition to the list of Ontario organizations targeted by cybercriminals. This incident not only disrupts the academic environment but also raises alarms about the increasing vulnerability of educational institutions to cyber threats.
- [Centralia College Hit With Ransomware Attack](https://security.geant.org/centralia-college-hit-with-ransomware-attack/): Early this morning, Centralia College learned of a ransomware attack on its local servers. At this time, the servers are shut down and an investigation is underway. The college website and campus wifi are down. College faculty and staff are currently unable to receive email from outside senders.
- [Ransomware Attack Disrupts UMT Operations: Recovery Efforts Ongoing Amid Global Cybersecurity Surge](https://security.geant.org/ransomware-attack-disrupts-umt-operations-recovery-efforts-ongoing-amid-global-cybersecurity-surge/): The University of Management and Technology (UMT) has faced a significant cybersecurity challenge, falling victim to a ransomware attack that has severely disrupted its data center operations. This incident has impacted the university's online database and Enterprise Resource Planning (ERP) system, leading to a halt in critical services such as course registration, fee challan generation,
- [German applied sciences university announces being hit by criminal cyberattack](https://security.geant.org/german-applied-sciences-university-announces-being-hit-by-criminal-cyberattack/): Hochschule Kempten, a university of applied sciences in the city of Kempten in Germany, has announced being targeted by a criminal cyberattack that forced the institution to take down its IT infrastructure. In a statement published Tuesday, the institution said: “Despite very high security precautions, the criminals managed to gain access to parts of the
- [Cyber Siege: UK Universities Including Cambridge Hit by DDoS Attack](https://security.geant.org/cyber-siege-uk-universities-including-cambridge-hit-by-ddos-attack/): Several UK universities, including the renowned Cambridge, are battling a sophisticated Distributed Denial of Service (DDoS) attack that has crippled internet and IT services. This onslaught highlights a pressing need for robust cyber defenses in the educational sector. Researchers have responded with an innovative approach that integrates meta-heuristic optimization and deep learning to significantly enhance
- [University of Cambridge and University of Manchester Targeted by Anonymous Sudan](https://security.geant.org/university-of-cambridge-and-university-of-manchester-targeted-by-anonymous-sudan/): The group, believed to be utilizing the Skynet botnet, recently upgraded its capabilities. In a post attributed to the threat actor, Anonymous Sudan cited reasons for the attack, including the UK’s perceived support for Israel and involvement in conflicts such as the Gaza and bombing campaigns in Yemen. Anonymous Sudan, a hacker group, engaged in
- [Network outage at MSUM caused by cyber attack](https://security.geant.org/network-outage-at-msum-caused-by-cyber-attack/): An internet outage that’s been affecting students, faculty and staff at Minnesota State University-Moorhead for more than two weeks was caused by a ransomware attack, according to university officials. On Thursday, February 1, the MSUM IT team discovered that some servers were not performing as expected. They immediately activated the Incident Response (IR) plan, which
- [IT systems at UCM remain offline following attempted cyberattack](https://security.geant.org/it-systems-at-ucm-remain-offline-following-attempted-cyberattack/): Information technology systems at the University of Central Missouri remain offline after an attempted cyberattack on its servers. The University of Central Missouri announced on Wednesday, Feb. 7, that officials had been made aware of an attempted cyber breach on its servers.
- [Connecticut College Discloses Data Breach From 11 Months Ago](https://security.geant.org/connecticut-college-discloses-data-breach-from-11-months-ago/): A spokesman for the private liberal arts college did not say why it took nearly a year to announce that a data breach had exposed Social Security numbers and other information for an unspecified number of people.
- [Tshwane University of Technology suffers ransomware attack — thousands of records stolen](https://security.geant.org/tshwane-university-of-technology-suffers-ransomware-attack-thousands-of-records-stolen/): Tshwane University of Technology (TUT) has suspended deputy vice-chancellor Professor Bhekisipho Twala over a data breach that resulted in “hundreds of thousands” of records being stolen, News24 reports. The hack reportedly occurred on 17 December 2023, and Twala allegedly failed to address the attack or manage its aftermath. Twala heads the institution’s digital transformation portfolio
- [2024 State of Ransomware in Education: 92% spike in K-12 attacks](https://security.geant.org/2024-state-of-ransomware-in-education-92-spike-in-k-12-attacks/): In 2023, 43% of all ransomware in education attacks in 2023 targeted Higher Ed and 36% of attacks targeted K-12. Ransomware attacks on Higher Ed increased 70% between 2022 and 2023, with 68 attacks in 2022 and 116 total attacks in 2023.
- [Russian Hackers Believed to be Behind Cyber Attack on Icelandic University](https://security.geant.org/russian-hackers-believed-to-be-behind-cyber-attack-on-icelandic-university/): Net safety specialists and employees of Reykjavík University (HR) have been hard at work getting the university system back on line and recovering files since Friday morning, Vísir reports, following a cyber attack. In a statement from HR, it is believed that the Russian hacker group Akira is behind the attack. This group typically employs
- [Russian spies impersonating Western researchers in ongoing hacking campaign](https://security.geant.org/russian-spies-impersonating-western-researchers-in-ongoing-hacking-campaign/): Hackers working for Russia’s intelligence services are impersonating researchers and academics in an ongoing campaign to gain access to their colleagues’ email accounts, according to messages and files seen by Recorded Future News and independently analyzed by two cybersecurity companies.
- [University of Sunderland beefs up cyber security following attack and gives insight into likely cause](https://security.geant.org/university-of-sunderland-beefs-up-cyber-security-following-attack-and-gives-insight-into-likely-cause/): The University of Sunderland has revealed how it has beefed-up its cyber security since a debilitating attack in October 2021 which crippled the university’s online system. Such was the extent of the impact of the infiltration that the university enlisted the help of cyber-security experts, CrowdStrike, who specialise in responding to such attacks as well
- [Cybercriminals stole thousands of UW records, but system leaders didn’t tell the public. Why?](https://security.geant.org/cybercriminals-stole-thousands-of-uw-records-but-system-leaders-didnt-tell-the-public-why/)
- [Carnegie Mellon Cyber Attack Compromises Data of 7,300 People](https://security.geant.org/carnegie-mellon-cyber-attack-compromises-data-of-7300-people/): "A third party briefly accessed files which included some personal information of current or former students, employees, applicants or contractors," the university said in a statement provided to TribLive by spokesman Peter Kerwin. "Our information security office secured the system within hours of detection and quickly engaged law enforcement." The university said there is no
- [University of Twente Maps Decision-Making Process for Ransomware Victims](https://security.geant.org/university-of-twente-maps-decision-making-process-for-ransomware-victims/): Based on 481 ransomware attacks from the Dutch police and a Dutch incident response party, we arrive at a number of key insights: Insurance led to a 2.8x higher ransom amount paid, without affecting the frequency of payments. Data exfiltration led to a 5.5 times higher ransom amount paid, without affecting the frequency of payments.
- [Cyber attack causes college to cancel classes](https://security.geant.org/cyber-attack-causes-college-to-cancel-classes/): College information technology employees received emergency notifications about an intrusion into CCC’s network servers; it was the first of several attacks against the college network that took place into the early hours of Friday morning. The team responded quickly and began isolating the servers that were under attack. Support personnel swiftly determined that the IP
- [Kansas State University cyberattack disrupts IT network and services](https://security.geant.org/kansas-state-university-cyberattack-disrupts-it-network-and-services/): Kansas State University (K-State) announced it is managing a cybersecurity incident that has disrupted certain network systems, including VPN, K-State Today emails, and video services on Canvas and Mediasite. Impacted systems were taken offline upon detection of the attack, resulting in the unavailability of VPN, emails, Canvas and Mediasite videos, printing, shared drives, and mailing
- [Hackers post gory videos on Discord groups at UC Irvine, causing mental trauma](https://security.geant.org/hackers-post-gory-videos-on-discord-groups-at-uc-irvine-causing-mental-trauma/): Hackers last week attacked Discord online groups used by students, instructors and alumni at UC Irvine, posting gory videos of human and animal mutilation that reportedly sent some viewers to the hospital and caused a lot of “vomiting and tears.” About 3,000 users were exposed to the disturbing images in the cyber attack before hackers
- [Computer Security: Hits are coming closer](https://security.geant.org/computer-security-hits-are-coming-closer/): Until recently, universities had been attacked only very occasionally. One of the last in this sad line-up was the University of Michigan. But the last year has also seen major attacks against accelerators and telescopes ─ as collateral damage and as the attackers' main focus, respectively. Over the past 12 months, the CERN Computer Security
- [Hundreds of museums hit by cyber attack](https://security.geant.org/hundreds-of-museums-hit-by-cyber-attack/): Hundreds of art institutions and museums have been affected by a cyber attack on the Gallery Systems software company, with those impacted previously using the software to organise their online archives. Last month, Gallery Systems informed its clients that computers using its software had become encrypted and could no longer operate. They launched an investigation,
- [British Library to burn through reserves to recover from cyber attack](https://security.geant.org/british-library-to-burn-through-reserves-to-recover-from-cyber-attack/): The British Library will drain about 40 per cent of its reserves to recover from a cyber attack that has crippled one of the UK’s critical research bodies and rendered most of its services inaccessible. The London-based institution, which stores nearly 170mn pieces of work ranging from books to sound recordings, was forced offline in
- [Ransomware gang starts leaking data stolen from Quebec university](https://security.geant.org/ransomware-gang-starts-leaking-data-stolen-from-quebec-university/): The LockBit ransomware gang has started releasing data it says was stolen last month from a Quebec university. The data is from the University of Sherbrooke, with a student body of about 31,000 and 8,200 faculty and staff.
- [Cybersecurity issue affecting Grenfell Campus of Memorial University](https://security.geant.org/cybersecurity-issue-affecting-grenfell-campus-of-memorial-university/): "Memorial is actively working with cybersecurity experts to conduct a forensic investigation to determine the cause and scope of the issue. This investigation is in its early stages and will likely take some time to complete. Memorial will directly notify any individuals whose information may have been affected by this incident," the statement reads.
- [Bunker Hill Community College Notifies Over 170k Current and Former Students of Data Breach](https://security.geant.org/bunker-hill-community-college-notifies-over-170k-current-and-former-students-of-data-breach/): On December 28, 2023, Bunker Hill Community College (“BHCC”) filed a notice of data breach with the Attorney General of Massachusetts after discovering what the organization believes to have been a ransomware attack. In this notice, BHCC explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes
- [Due to the leak of personal data on December 8. cyber attack against KTU](https://security.geant.org/due-to-the-leak-of-personal-data-on-december-8-cyber-attack-against-ktu/): For December 8 attacks against the information systems of the Kaunas University of Technology, when access to many systems was disrupted, the investigation of the incident was immediately started and the system restoration works were started, the incident was reported to the law enforcement and supervisory authorities. During the internal investigation, it was established that
- [Cyber Attack at University of Innsbruck](https://security.geant.org/cyber-attack-at-university-of-innsbruck/): Unknown people have carried out a cyber attack on the University of Innsbruck in Austria. 23,000 master data had been downloaded by students, including names, birth dates, residence and e-mail addresses, and the university announced on Monday.
- [LockBit Hits Richmont University: Breach Details Uncertain](https://security.geant.org/lockbit-hits-richmont-university-breach-details-uncertain/): The notorious LockBit ransomware group has declared Richmont Graduate University as its latest victim, marking an alarming trend of cyber threats directed toward educational institutions. The extent of the breach, potential data compromise, and the motive behind this targeted Richmont Graduate University cyberattack remain undisclosed at this time.
- [The Disturbing Impact of the Cyberattack at the British Library](https://security.geant.org/the-disturbing-impact-of-the-cyberattack-at-the-british-library/): The library has been incapacitated since October, and the effects have spread beyond researchers and book lovers. On November 20th, a hacking group called Rhysida—after a genus of caterpillars—offered 490,191 files stolen from the British Library for sale on the dark Web. United States cybersecurity officials describe Rhysida as a “ransomware-as-a-service” provider—a gun for hire—part
- [The University of Sherbrooke has been the victim of a cyber attack](https://security.geant.org/the-university-of-sherbrooke-has-been-the-victim-of-a-cyber-attack/): The UdeS says it is not under the influence of a ransomware. The situation is located in two research laboratories. "Some data from two research laboratories were compromised. The compromise of assets is very localized", according to a statement.
- [Ontario public library shuts down most services due to cyberattack](https://security.geant.org/ontario-public-library-shuts-down-most-services-due-to-cyberattack/)
- [Hackers go after State, academia in new attacks wave](https://security.geant.org/hackers-go-after-state-academia-in-new-attacks-wave/)
- [University of Wollongong Confirms Data Breach, Notifies Authorities](https://security.geant.org/university-of-wollongong-confirms-data-breach-notifies-authorities/): The university admitted to iTnews that it is “likely that data was accessed,” but emphasized that the breach has been “detected and contained” as of Sunday, December 10. The exact scope of the University of Wollongong data breach and the number of individuals affected remain undisclosed.
- [DePauw University warns of data breach as ransomware attacks on colleges surge](https://security.geant.org/depauw-university-warns-of-data-breach-as-ransomware-attacks-on-colleges-surge/): Extract: DePauw University warned students this week that their personal information may have been accessed by hackers who attacked the school. ... The school added that the reason it had the information was because it “maintains certain personal information for standard enrollment and administrative purposes.”
- [Open University (in Cyprus) fined for negligent cyber security after being hacked](https://security.geant.org/open-university-in-cyprus-fined-for-negligent-cyber-security-after-being-hacked-nov-28-2023/)
- [Cybersecurity incident shuts down DePauw University computer systems](https://security.geant.org/cybersecurity-incident-shuts-down-depauw-university-computer-systems-nov-1-2023/)
- [Waterloo Cybersecurity Institute Lands $3.3M NCC Funding](https://security.geant.org/waterloo-cybersecurity-institute-lands-3-3m-ncc-funding-nov-2-2023/)
- [An Apparent Cyberattack Hushes the British Library](https://security.geant.org/an-apparent-cyberattack-hushes-the-british-library-nov-3-2023-2/): - Personal data stolen in British Library cyber-attack appears for sale online, Nov 22, 2023 https://www.theguardian.com/technology/2023/nov/22/personal-data-stolen-in-british-library-cyber-attack-appears-for-sale-online
- [Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors](https://security.geant.org/agonizing-serpens-aka-agrius-targeting-the-israeli-higher-education-and-tech-sectors-nov-6-2023/)
- [University of Central Florida team crowned champion at the 2023 CyberForce Competition](https://security.geant.org/university-of-central-florida-team-crowned-champion-at-the-2023-cyberforce-competition-nov-7-2023/)
- [Ransomware Gang Claims to Have Stolen 430 GB of Internal Data in Stanford University Data Breach,](https://security.geant.org/ransomware-gang-claims-to-have-stolen-430-gb-of-internal-data-in-stanford-university-data-breach-nov-9-2023/)
- [Pacific Union College Reports Data Breach Affecting 56,041 People](https://security.geant.org/pacific-union-college-reports-data-breach-affecting-56041-people-nov-12-2023/)
- [Pierce College Sued in Wake of Cyber Attack](https://security.geant.org/pierce-college-sued-in-wake-of-cyber-attack-nov-14-2023/)
- [Students across Scotland take part in mock cyberattack scenario to test crisis response](https://security.geant.org/students-across-scotland-take-part-in-mock-cyberattack-scenario-to-test-crisis-response-nov-17-2023/)
- [Vanderbilt University Medical Center investigating cybersecurity incident](https://security.geant.org/vanderbilt-university-medical-center-investigating-cybersecurity-incident-nov-24-2023/)
- [Cyberattack cancels online classes at NCCU, disrupts other services](https://security.geant.org/cyberattack-cancels-online-classes-at-nccu-disrupts-other-services-nov-14-2023/): - Entering the second week, NCCU begins to restore its applications, Nov 27, 2023 https://campusecho.com/entering-the-second-week-nccu-begins-to-restore-its-applications/
- [California community college Río Hondo dealing with cybersecurity incident, Nov 1, 2023](https://security.geant.org/california-community-college-rio-hondo-dealing-with-cybersecurity-incident-nov-1-2023/)
- [SIG-ISM: Information Security Management](https://security.geant.org/sig-ism/): Developing security expertise and excellence within the NREN community​ SIG-ISM offers CISOs (Chief Information Security Officers) of national research and education network (NREN) organisations the opportunity to share best practices and learn from each others' experience, to safeguard their NREN against security incidents and threats. The CISO role has become increasingly important as organisations become
- [Cyber Security Month 2021:](https://security.geant.org/cyber-security-month-21-a-preview/): October 2021 was Cyber Security Month. Also this year GÉANT launched a campaign to raise cybersecurity awareness within the R&E community. After the success of “Become a Cyber ​​Hero” CSM2020, which saw the active participation of 20 NREN organisations from Europe and beyond, we are delighted to inform you that Cyber Heroes returned bigger and
- [Security Baseline](https://security.geant.org/baseline/): A Security Maturity Model for NRENs This document is available for download here: GÉANT Security Baseline v1.0. An assessment sheet for evaluating the Baseline within your organisation is available for use. Introduction Information systems are an essential part of all today's organisations that enable the execution of processes and the provision of services. However, more
- [Training](https://security.geant.org/training/): The GÉANT GN4 project has arranged a series of training events to support the community. The training events have been offered live throughout 2020 / 21. Previously run sessions are available for viewing on GÉANTTV. Operating system privacy and security Operating System Telemetry – configuring protection in Windows 10 (slides) (recording) Logging and Audit –
- [HEAnet deploys the Resource Public Key Infrastructure (RPKI) on its IP network to increase security](https://security.geant.org/heanet-deploys-the-resource-public-key-infrastructure-rpki-on-its-ip-network-to-increase-security/): HEAnet is committed to continuously improve internet security and protect its clients. The latest improvement is the usage of RPKI-based BGP route origin validation on its IP network identified as AS1213. The recent Safer Internet Day was a good opportunity to reflect on what is our contribution to making the internet a better, safer place.
- [Proactive security monitoring can help reduce vulnerability of systems and organisations](https://security.geant.org/proactive-security-monitoring-can-help-reduce-vulnerability/): CONNECT meets David Heed, Network and Security Services Coordinator for SUNET (Swedish University Computer Network) to talk about the latest initiatives by the Work Package on Security (WP8) within the GÉANT Project (GN4-3). David, tell us about yourself, your role at SUNET and within GN4-3. At SUNET since 2018, I have been working for
- [Running your own DNS service? There may be changes ahead](https://security.geant.org/running-you-own-dns-service-there-may-be-changes-ahead/): CONNECT meets Alf Moens, Security Lead for GÉANT to talk about the European Commission’s revised Directive on Security of Network and Information Systems (NIS2 Directive). Alf, tell us about this new EC security directive. The NIS2 Directive defines the protection of critical infrastructure in all EU member states. This version, originally seen as a
- [Ransomware attacks affecting the Irish Higher Education Sector](https://security.geant.org/ransomware-attacks-affecting-the-irish-higher-education-sector/): Ransomware attacks on Higher Education Institutions (HEIs) across the world have been increasing recently and for some colleges and universities, this has been devastating. Recently some HEAnet members were victims of such attacks. Colleges and universities handle large amounts of data such as personal information on staff and students, including information like names, birth dates,
- [GÉANT Security - Helping Protect R&E Services](https://security.geant.org/geant-security-helping-protect-re-services/)
- [Cyber Security Month 2021: a preview](https://security.geant.org/cyber-security-month-2021-a-preview/): Hero image
- [A community of Cyber Heroes](https://security.geant.org/a-community-of-cyber-heroes/): Become A Cyber Hero, the first pan-European campaign organised by the GÉANT community, as part of the European Cyber Security Month 2020 activities, closed last month. The objective of the campaign was to encourage end-users to arm themselves against digital threats and feel empowered to protect (themselves and) their organisation. The initiative witnessed the active
- [War, peace and cooperation – cyber security developments and training in Georgia](https://security.geant.org/war-peace-and-cooperation-cyber-security-developments-and-training-in-georgia/): Cyber-attacks were a key feature of the 2008 Russo-Georgian war; they affected websites of news agencies, the Georgian President and were implicated in the explosion of an oil pipeline. At that time in Georgia there was no governmental CERT (Computer Emergency Response Team). Today there is the CERT.GOV.GE national team which cooperates closely with CERT-GE
- [Information Security: Virtual Learning with Experts](https://security.geant.org/information-security-virtual-learning-with-experts/): Increasing reliance on ICT in all aspects of daily life has created an environment prone to criminal activities such as computer intrusions, denials of service, threats to critical information infrastructure networks, etc. The scope of the challenge and its evolving nature requires a comprehensive network security strategy to be properly addressed. In response, with the
- [Harder times for fraudulent online shops](https://security.geant.org/harder-times-for-fraudulent-online-shops/): With online commerce on a steep rise, the potential for luring customers through false online shops is also growing. Now, however, Switzerland's national research and education network SWITCH is working with partners to make things harder for the perpetrators. A new tool will spot patterns in the way fraudulent web shops are set up and
- [How to secure your passwords](https://security.geant.org/some-tips-to-secure-your-passwords/): By Guillaume Rousse, IT Security Engineer at GIP RENATER These days, passwords are a universal authentication method, because they are simple to configure on the server side, easy to use from any terminal, and simple to understand for the user. Nevertheless, for an attacker, they are just as easy to steal or guess... Faced with
- [How LITNET CERT uses honeypots to increase password security](https://security.geant.org/how-litnet-cert-uses-honeypots-to-increase-password-security/): The primary objective of the LITNET CERT, the Computer Emergency Response Team of the LITNET networks is to tackle security incidents, but it is also fully dedicated to their prevention. In order to deal with shared security challenges, the CERT has been using honeypots since 2017 to improve password security, among other things. GÉANT spoke
- [Keep your secrets!](https://security.geant.org/keep-your-secrets/): By Urpo Kaila, Head of Security at CSC, Finland The password is dead, we have been hearing this for a very long time. ‘You need to use keys, certificates, tokens, biometrics, or at least passphrases, but not passwords, they are history’, it was said. But here we go, in the age of digitalisation we still
- [Passwords, P9ssw0rds, Pa55w0rd5!](https://security.geant.org/passwords-p9ssw0rds-pa55w0rd5/): By Carolina Fernandez, Jordi Guijarro and Shuaib Siddiqui, i2cat Foundation Introduction of IdP environment in the context of identity security eduGAIN, pioneered and supported by GÉANT, interconnects research and education identity federations around the world. It enables the trustworthy exchange of information between service providers and Research & Education (R&E) institutions or other Identity Providers
- [The human side of password security](https://security.geant.org/the-human-side-of-password-security/): By Andrea Pinzani, IT security expert at the Consortium GARR On average, each of us owns from 20 to 40 accounts. Unfortunately, however, we are not very good at creating strong passwords. We prefer short ones, often using personal information, common words, predictable strategies and composition or replacement schemes. We're not even very careful at
- [7 quick questions about password managers](https://security.geant.org/7-quick-questions-about-password-managers/): The use of password managers is increasing. No surprise, as they simplify password security and are user friendly. Why do you need one and what are the benefits? We asked Stefano Zanero, Associate Professor at the Politecnico di Milano University. Stefano, what exactly is a password manager? A password manager is a tool that stores
- [Managing passwords](https://security.geant.org/managing-passwords/): To be effective, passwords need to be long, complicated and unique. It’s also a good idea to have a separate password for every account. But don’t worry, that’s doesn’t mean learning multiple passwords because there’s simple tech available to help with that. But how can you possibly remember them all? Don’t make it easy for
- [Uncovering Android Ransomware with Explainable AI](https://security.geant.org/uncovering-android-ransomware-with-explainable-ai/): By Michele Scalas, Davide Maiorca and Giorgio Giacinto, University of Cagliari Ransomware represents a serious threat that acts by locking the compromised device and encrypting its data (along with exfiltrating private information), forcing the device owner to pay a ransom to restore the device functionality or to avoid that the stolen data is publicly available.
- [We got ransomware! Where is the backup?](https://security.geant.org/we-got-ransomware-where-is-the-backup/): By Leonardo Lanzi, coordinator of the GARR CERT Once upon a time... In March 2016, I had the chance to be near enough a ransomware infection to be able to examine how it functions and its effects and, as I was not being the real target, I was able to keep calm and give some
- [Immune to ransomware? With a collaborative approach, you can](https://security.geant.org/immune-to-ransomware-with-a-collaborative-approach-you-can/): By Francesco Palmieri, professor of Computer Science at the University of Salerno Ransomware, considered today an important emergency from the cyber security point of view, is from malware agents who limit access to a device or to the data stored on it, typically using robust cryptographic techniques, and offer the possibility of unlocking only after
- [Interview: How the University of Duisburg-Essen (UDE) prevented a ransomware attack](https://security.geant.org/connect-interview-how-the-university-of-duisburg-essen-ude-prevented-a-ransomware-attack/): In May 2019, the University of Duisburg-Essen (UDE) was able to prevent a ransomware attack just in time. For the Cyber Security Month 2020 initiative, GÉANT contacted Marius Mertens, CISO of UDE, to learn how the university managed to prevent such attack and talk about the main challenges in the area of cyber security. Marius,
- [Case study: What Maastricht University (UM) learned from the ransomware attack (part 2)](https://security.geant.org/case-study-what-maastricht-university-um-learned-from-the-ransomware-attack-part-2/): On 23 December last year, Maastricht University (UM) was hit by a major ransomware attack. The hackers executed a command installing 'Clop' ransomware on 267 servers of the Windows domain. As a result, almost all of UM's operational processes were disrupted. Several online backup servers were encrypted as well. In part 2 of the interview
- [Case study: What Maastricht University (UM) learned from the ransomware attack (part 1)](https://security.geant.org/case-study-what-maastricht-university-um-learned-from-the-ransomware-attack-part-1/): On 23 December last year, Maastricht University (UM), which is connected to the Dutch education and research network SURFnet, was hit by a major ransomware attack. After thorough investigation and serious consideration, the institution decided to pay the requested ransom. GÉANT spoke with Bart van den Heuvel, Chief Information Security Officer (CISO) at UM. 'A
- [Ransomware and beyond](https://security.geant.org/ransomware-and-beyond/): By Pier Luca Montessoro, University of Udine One day, one very bad day, you open your laptop and a red screen informs you that all your files have been encrypted and you have to pay a ransom in bitcoin to get them back. And what is worse, you know (or you should know) that maybe
- [Advanced Ransomware Attacks](https://security.geant.org/advanced-ransomware-attacks/): SI-CERT, the national CSIRT of Slovenia has been handling reports of ransomware attacks on a regular basis since April 2012. Until 2019, attack victims were selected randomly as part of a mass-volume campaign aiming to spread the virus. However, since 2019 the attacks have been more targeted. In most cases, the vector of infection is
- [The prevalence of Ransomware and how to protect your system](https://security.geant.org/the-prevalence-of-ransomware-and-how-to-protect-your-system/): By Avinash Singh and Hein Venter, Department of Computer Science at the University of Pretoria Ransomware is one of the most destructive forms of malware which targets the most important asset of any organisation or system, their data. Ransomware targets your data by encrypting it using strong encryption algorithms to render your data useless unless
- [Ransomware: minimise impact](https://security.geant.org/ransomware-minimise-impact/): Ransomware is used by cyber criminals to block you from accessing your data and hold it ‘hostage’ until you pay the ransom. How does it work and how to avoid losing control over your data? Read our tips and tricks below and become a cyber hero! Tip 1 Ransomware takes advantage of security breaches in
- [The first steps for the North Macedonian CIRT: Interview with Prof. Sonja Filiposka](https://security.geant.org/the-first-steps-for-the-north-macedonian-cirt-interview-with-prof-sonja-filiposka/): The CIRT of the Faculty Computer Science of the University of Skopje was founded 2.5 years ago as the result of a cybersecurity exercise which brought to light the need to raise cyber security awareness and coordinate the response to potential cyber security attacks. The CIRT's objective is to raise awareness among students and within
- [Phishing in the COVID emergency: corporate defence strategies](https://security.geant.org/phishing-in-the-covid-emergency-corporate-defence-strategies/): By Nicla Ivana Diomede, Chief Information Security Officer at the University of Milan What is Phishing? Phishing is a type of fraud aimed at illegally stealing confidential information such as login credentials (username and password), credit card numbers and so on. Email is the main attack vector, but text messages, chat and social media can
- [From phishing to CIRT: How the first academic CIRT was established in North Macedonia](https://security.geant.org/from-phishing-to-cirt-how-the-first-academic-cirt-was-established-in-north-macedonia/): By Sonja Filiposka and Anastas Mishev, respectively head and former head of FINKI CIRT Nowadays phishing attacks are one of the most notorious and dangerous threats to any organisation. It is estimated that the financial impact of phishing attacks could reach up to 5 billion dollars per year. Due to their wide-spread nature and impact,
- [Simulating phishing to raise user awareness](https://security.geant.org/simulating-phishing-to-raise-user-awareness/): By Maria Sole Scollo, IT security expert at Consortium GARR Even if phishing has been for many years now a well-known illegal practice, asking people for their sensitive information is still the most effective way for cyber criminals to get them. A good part of the spam we receive is still today sent by compromised
- [Demystifying phishing - Part 2](https://security.geant.org/demystifying-phishing-part-2/): Continues from Demystiphying phishing - Part 1 By Damien Mascré, David Verdin, Laurent Aublet-Cuvelier (RENATER) Phishing aims to steal your secrets. Actually, it is even more malicious than that; it is designed to make you voluntarily hand over your secrets. A bit like a burglar asking you to deliver your furniture to a specific address.
- [Demystifying phishing - Part 1](https://security.geant.org/demystifying-phishing-part-1/): By Damien Mascré, David Verdin, Laurent Aublet-Cuvelier (RENATER) On the list of the many issues inflicted by emails, phishing appears to be social disease: rare, shameful and unfortunately fatal. Phishing occurs when a message appears to come from one sender when in fact it has come from another. Posing as a trusted third party, the
- [Phishing: how our university is dealing with this challenge](https://security.geant.org/phishing-how-our-university-is-dealing-with-this-challenge/): By Hendrik Höcke, IT security officer at the Zurich University of the Arts Whether with dynamite or a spear, phishing is a huge challenge for the Zurich University of the Arts (ZHdK). Currently, we reject more than half of the e-mails we receive every day, and the trend is rising. Of course, not all of
- [How Security Awareness can aid our fight against phishing](https://security.geant.org/how-security-awareness-can-aid-our-fight-against-phishing/): In the current climate we live in with many of us working remotely or from home, the importance of security awareness has increased drastically. It is known and has been publicised that much of cyber risk can be associated with a potential lack of a security aware culture. An Irish Times newspaper article in September
- [Building trust to stop phishing](https://security.geant.org/building-trust-to-stop-phishing/): In 2020 we cannot doubt the threat posed by phishing; we could spend so much time trying to size the risks for our organisations and society. I am not even sure I could give an accurate estimation of this risk. There is so much unknown. However, for many of us, being targeted by phishing cyber
- [Phishing: you win again](https://security.geant.org/phishing-you-win-again/): By Martin Waleczek, DFN-CERT Having an online existence has never been more rewarding. Almost daily someone wins the million dollar jackpot of a lottery and wants to share it with you, you get links to the best prices at the local pharmacy or online stock exchange and your IT department or bank kindly reminds you
- [How to recognise phishing emails](https://security.geant.org/how-to-recognise-phishing-emails/): By Roberto Cecchini (INFN - GARR) What is phishing? Phishing is one of the many social engineering techniques used to deceive users. It is a type of fraud used to obtain sensitive information from a person or a firm, such as passwords and credit card details. The perpetrators, using electronic communication – typically email, instant
- [Phishing: Don't get caught!](https://security.geant.org/phishing-dont-get-caught/): How to recognise phishing? What should you do with phishing mails? And what if you have clicked on a malicious link? Read our tips and tricks below and become a cyber hero! Tip 1 Phishing emails often contain a link to an external website. Never simply click on links in emails, always check the URL.
- [Hacking humans is easier than hacking machines](https://security.geant.org/hacking-humans-is-easier-than-hacking-machines/): By Francesco Ficarola, Università La Sapienza, Rome Warning: picture ahead showing animal in distress If you are reading this, then chances are that you have heard of Social Engineering (SE) at least once in your life. Perhaps, right now, you are thinking “how do I influence my boss to get a raise?”. Yes, don’t worry,
- [Usurp, Manipulate, Exploit](https://security.geant.org/usurp-manipulate-exploit/): By Christine Glaser, Communications and Marketing Manager, Restena Foundation, with the contribution of Jean-Paul Weber, Security Engineer, Restena Foundation Any company or institution may one day be faced with social engineering attacks. For example, searching for waste or for poorly protected access to a building, or – above all – manipulating people are just a
- [It's now or never! - and it never is as expected](https://security.geant.org/its-now-or-never-and-it-never-is-as-expected/): By Simona Venuti, security manager at the GARR-CERT 'When it's time to talk about social engineering it's difficult for me to decide from where to start, because it is everywhere around us. The definition of social engineering is "the psychological manipulation of people into performing actions that they wouldn't normally do". And this happens over
- [The many ambiguous faces of social engineering](https://security.geant.org/the-many-ambiguous-faces-of-social-engineering/): By Silvia Arezzini, systems engineer and project manager at INFN (Italian National Institute for Nuclear Physics) "The problem of social engineering has always interested me because it shows the intertwining of technical and human aspects. Social engineering brings together a number of techniques aimed at inducing people to provide personal information, such as passwords or
- [When the sender is not who we think they are](https://security.geant.org/when-the-sender-is-not-who-we-think-they-are/): By Bruno Vuillemin, Security Officer of the University of Fribourg Sometimes a very simple fraud can cause a great deal of trouble. Whenever you receive and read an email, the sender might not necessarily be the person sending the message! In fact, most smartphones do not display the sender's "real email address", but rather what
- [Social Engineering - Don't let hackers manipulate you!](https://security.geant.org/social-engineering-dont-let-hackers-manipulate-you/): Social engineering is the act of manipulating or tricking people into certain actions, such as giving out personal or financial information that can be used to commit fraud. It’s an act, but also an art; social engineers are very good at influencing victims through their emotions, for example by pretending to be someone in need of
- [Case study: Cyber Security awareness at the Paul Scherrer Institute in Switzerland](https://security.geant.org/case-study-cyber-security-awareness-at-the-paul-scherrer-institute-in-switzerland/): The Paul Scherrer Institut (PSI) is the largest research centre in Switzerland. Cyber security challenges have increased enormously in recent years. In order to protect the continuity of its large research facilities and infrastructure, the organisation decided to focus on creating a culture of cyber security. We spoke with Björn Abt, IT Security Officer at
- [Social Engineering: How the new Work from Home concept has impacted the world](https://security.geant.org/social-engineering-how-the-new-work-from-home-concept-has-impacted-the-world/): By Francois Mouton, Associate Professor in Cyber Security at Noroff University College The world as we know it will never be the same. The start of the year 2020 brought along discussions about the corona virus family of viruses and how they are impacting our daily lives. COVID-19 had a massive impact on society at
- [Are you ready to become a cyber hero?](https://security.geant.org/are-you-ready-to-become-a-cyber-hero/): Cyber Security Month 2020 is upon us and we are excited! This campaign focuses on the importance of information security and the simple steps that can be taken to protect users’ personal, financial and professional data. The main goal is to create awareness, change behaviour and provide users with information on how to protect themselves
- [GÉANT Cyber Security Month 2020: a preview](https://security.geant.org/geant-cyber-security-month-2020-a-preview/): October is the Cyber Security Month 2020. GÉANT takes part in this EU initiative with the launch of a communication campaign that aims to raise cyber security awareness within its community. What is the European Cyber Security Month (ECSM)? ECSM is an EU awareness campaign promoting cyber security among individuals and organisations. The focus is
- [Improve your IT security skills with the Self-Online Practical training](https://security.geant.org/improve-your-it-security-skills-with-the-self-online-practical-training/): Recently the WP8-T1 team within the GÉANT GN4-3 project launched the Self-Online Practical (SOP) training for NRENs. This training offers a unique opportunity to develop new skills and competencies in IT security in the format of an information security competition that challenges contestants to solve a variety of tasks. The exercises are similar to the
- [Security in the Cloud: Online Workshop for NRENS 30 June, 10:00-12:00 CEST](https://security.geant.org/security-in-the-cloud-online-workshop-for-nrens-30-june-1000-1200-cest/): Academia remains cautious about security in adopting cloud computing models. Putting data on someone public storage or running software on someone else’s CPU can trigger fears of data loss, phishing, botnet and more. Join us for an online workshop featuring high-level presentations, demos and discussion on techniques to address the security concerns of NRENs and
- [eduVPN – Supporting Safer Remote Learning](https://security.geant.org/eduvpn-supporting-safer-remote-learning/): With so many staff and students working from home, the need for safe and secure WiFi access is paramount. eduVPN aims to offer both secure access to campus networks as well as the ability to be safer when using the Internet, when eduroam is not available and you are relying on insecure WiFi networks to
- [Alf Moens joins GÉANT](https://security.geant.org/alf-moens-joins-geant/): We are delighted to announce that on 1 June Alf Moens joined the GÉANT family as Senior Information Security Officer in Klaas Wierenga’s team. In his new role Alf will be involved in the development of GÉANT’s security strategy with a focus on business continuity planning and the expansion of the service offering for NRENs.
- [First Virtual TF-CSIRT Meeting](https://security.geant.org/virtual-tf-csirt/): The 25th May 2020 should have seen the TF-CSIRT community gathering once together in Romania for our 60th TF-CSIRT but like so many other groups we found ourselves meeting online instead. The TF-CSIRT Steering Committee, Taxonomy Working Group and TF-CSIRT Futures Working Group were able to translate relatively easily to the online setting, but for
- [The DDoS Mitigation Workshop for the GÉANT Community](https://security.geant.org/the-first-ddos-mitigation-workshop-for-the-geant-community-2/): DDoS Mitigation Workshop for the GÉANT Community - 18-19 May, Vienna, Austria We are pleased to announce that a workshop on DDoS Mitigation, the first of a series of security workshops planned in 2020, will take place on 18-19 May in Vienna, Austria. The main objective of this event is to give NRENs the opportunity
- [Can you Hack the Hacker at TNC20?](https://security.geant.org/can-you-hack-the-hacker-at-tnc20/): The GN4 security work package has teamed up with SWITCH to bring Hack the Hacker to TNC20. Hack the Hacker is an escape room where the mission of your team is to discover the code that revokes encryption executed by malicious software. Together with up to 6 people you have to search the hacker's den
- [Safer Internet Day 2020: Together for a better internet](https://security.geant.org/safer-internet-day-2020-together-for-a-better-internet/): Today, 11 February 2020, hundreds of not-for-profit and industry organisations across the globe join forces to work "Together for a better internet". Over the years, Safer Internet Day (SID) has become a landmark event in the online safety calendar. Starting as an initiative of the EU SafeBorders project in 2004, SID is now celebrated in
- [TRANSITS II training in Utrecht](https://security.geant.org/transits-ii-training-in-utrecht/): I had the pleasure to take part in the TRANSITS II training in Utrecht in January 2020. One of the great things about these trainings is that they are not just about tools and techniques, but about getting to know people from other CERTs/CSIRTs, especially from the European community. However, the training part was also
- [New code of ethics for cyber security professionals - Guidelines applicable for all sectors, including European NRENs](https://security.geant.org/new-code-of-ethics-for-cyber-security-professionals-guidelines-applicable-for-all-sectors-including-european-nrens/): For the first time, and with input from Jisc, a code of ethics has been created for all professionals working in product and computer security incident response teams (PCIRTs and CSIRTs) in all sectors, including education and research. Cyber security and the important work of security incident response teams in keeping the Internet safe has never been
- [Meet the secret hero of TRANSITS-2](https://security.geant.org/meet-the-secret-hero-of-transits-2/): TRANSITS is the state of the art, high-quality training to Computer Security and Incident Response Team (CSIRT) personnel. GÉANT runs three TRANSITS open-registration workshops a year: two basic level courses, TRANSITS-1 and one advanced course, TRANSITS-2. Amongst all three, the advanced workshop is one of a kind. It further builds and develops the CSIRT competencies by providing hands-on experience
- [CLAW2019: Crisis, Creativity and a Whole Lot of Fun](https://security.geant.org/claw2019-crisis-creativity-and-a-whole-lot-of-fun/): A month ago, 75 participants from all over Europe met at PSNC in Poznan, Poland to immerse themselves in talks, training sessions and exercises about crisis management. For those who could not join us, here's my overview of all the fun and learning we had over two days. And as a picture speaks more than
- [GÉANT DDoS Cleansing and Alerting Service Launched](https://security.geant.org/geant-ddos-cleansing-and-alerting-copy/): Supporting GÉANT peering users with dynamic, fast responses to DDoS Distributed Denial of Service (DDoS) is a large and growing problem within the networking community with a large number of NRENs of NRENs reporting attacks every month. These attacks not only damage live services for users but affect the reputation of the NREN amongst their
- [Top Ten Risks for NRENs](https://security.geant.org/top-ten-risks-for-nrens/): Text: The logic behind application security risks according to OWASP. This article shares some thoughts and examples on how to identify business risks for NRENs. Information security is, by definition, or at least by my definition, about protecting our assets against risks. In order to do this, we must know our assets. For National Research
- [Treat your data like treasure](https://security.geant.org/treat-your-data-like-treasure/): Last week I attended my very first Security Conference organised by Jisc in the UK. As a communications professional in R&E networking I need to get a better grasp of this relevant topic, learn about the threats faced by our sector and be able to write about it with confidence and competence. Travelling by train
- [Security Operations Tools Workshop 2019 – NREN security experts welcome!](https://security.geant.org/security-operations-tools-workshop-2019-nren-security-experts-welcome/): At the first ever Security Day at TNC19 earlier this year, SOC (Security Operations Centre) was probably the most frequently used acronym in the discussions. What do our constituents mean when they say that they need a SOC? Do all NRENs need a SOC? What are the most common functions of a SOC and, most
- [CONNECT interview, Mark Tysom, Product Manager, Jisc](https://security.geant.org/connect-interview-mark-tysom-product-manager-jisc/): CONNECT attended Jisc Security Conference 2019 in Newcastle and caught up with Mark Tysom, Cyber Security Product Manager for Jisc to learn more about the history of the conference and its growing importance for the organisation and its member base. Now in its fourth year, how has the Jisc Security Conference evolved? The first Jisc
- [GÉANT DDoS Cleansing and Alerting](https://security.geant.org/geant-ddos-cleansing-and-alerting/): Supporting GÉANT peering users with dynamic, fast responses to DDoS Distributed Denial of Service (DDoS) is a large and growing problem within the networking community with a large number of NRENs of NRENs reporting attacks every month. These attacks not only damage live services for users but affect the reputation of the NREN amongst their
- [CLAW 2019 - Programme and Speakers](https://security.geant.org/claw-2019-programme-and-speakers/): With less than one month to go, we are gearing up for CLAW 2019, the third Crisis Management Workshop for the GÉANT Community, hosted by PSNC in Poznan, Poland on 6-7 November. This year's programme features well-known, specialised speakers and stimulating workshops. The keynote will be given by Anna Wilson from HEAnet on Real Life
- [Cybersec Month @CSC: Preparing for Crisis](https://security.geant.org/cybersec-month-csc-preparing-for-crisis/): People are sometimes confused on where to start when preparing to handle crisis and security incidents. My advice is to start with a plan and start the plan with identifying what you actually are supposed to protect. Start with thinking big. Perhaps the ultimate asset to protect is not a service demon on your server
- [Cyber Security Month @SURF](https://security.geant.org/cyber-security-month-surf/): Often, people are said to be the weakest link in cyber security - worst case they are seen by technicians as the enemy - but we in the SURF Security team believe they are an asset. For people in your organization to become an asset, good awareness and tools for behavioural change are important. That
- [Hacking competitions The Catch is back!](https://security.geant.org/hacking-competitions-the-catch-is-back/): The Catch Hacking Challenge began this Monday. The plot of this year’s game is inspired by the Berserker book series. This year you will fight against the rebel machines. Who will save the world? Who wins? We play for valuable prizes! You can register and play on www.thecatch.cz Through the organization of the competition, we
- [Cybersecurity Month @Arnes](https://security.geant.org/cybersecurity-month-arnes/): ARNES has been raising awareness about cyber security and all other aspects of safe use of new technologies since its constitution. In 1995, ARNES's activity in these areas increased considerably for the first time and started focusing primarily on cyber security with the establishment of Slovenian Computer Emergency Response Team SI-CERT. The spread of the
- [European Cyber Security Month @RESTENA](https://security.geant.org/european-cyber-security-month-restena/): For the second year in a row, the cybersecurity event for research and education in Luxembourg will take place in October 2019, in the South of Luxembourg, during the European Cyber Security Month (ECSM). This annual event is co-organized by the Luxembourg’s NREN – the RESTENA Foundation – and the one and only University based
- [Working on CLAW 2019 crisis exercise](https://security.geant.org/working-on-claw-2019-crisis-exercise/): Sometimes I am just amazed at how cool my job is. I doubt that many people get to spend time creating a world, and then systematically planning its destruction, unless they work in game design. Of course, creating crisis exercises is almost like designing a (very stressful) game. Designing the game Last week Simon Jensen
- [Security at TNC19: here is what you don’t want to miss](https://security.geant.org/security-at-tnc19-here-is-what-you-dont-want-to-miss/): The number of security-related sessions and side meetings at TNC has been on the rise in the past few years, and this year is no exception. If you are working in security, want to meet colleagues from around the world and share your experience and knowledge or are simply interested in what is going on
- [Intense three-day Information Security Management meeting:  “We should do this more often”](https://security.geant.org/intense-three-day-information-security-management-meeting-we-should-do-this-more-often/): Don’t we just love a good security incident! A couple of years ago Wannacry targeted computers all around the world just days before a TF-CSIRT meeting, and there was no presentation that did not cover it. Last week we 'got lucky' again – the recent Confluence issue gave attendees of the joint SIG-ISM and WISE
- [CLAW 2018: crisis in 'Guilder'](https://security.geant.org/claw-2018-crisis-in-guilder/): Imagine... you're part of the crisis management team of the NREN in the (fictional) country of 'Guilder'. The crisis coordinator has called you and the entire team in the ‘war room’: a crisis has just hit your organisation. 200,000 students are set to take a nationwide test, but because of an unspecified glitch in your

## Pages

- [GÉANT Security](https://security.geant.org/): GÉANT security services protect both the networks and services from attacks but also help secure individual users when using the networks.
- [How to enhance your digital hygiene practices](https://security.geant.org/how-to-enhance-your-digital-hygiene-practices/): Discover how to enhance your digital hygiene practices. This page details how small habits help keep our devices secure, reliable and ready for everyday use.
- [Simple digital habits for high impact security protection](https://security.geant.org/simple-digital-security-habits-for-high-impact-protection/): Every day, we perform dozens of actions without even thinking about them. Discover simple digital habits for high impact security protection.
- [Security Awareness Campaign 2026](https://security.geant.org/security-awareness-campaign-2026/): The GÉANT Security Awareness Campaign 2026 encourages everyone across the research and education community to adopt practical security habits.
- [How to work securely when you’re remote](https://security.geant.org/how-to-work-securely-when-youre-remote/): When we are on the move, we don't leave our wallet or keys unattended. Discover how to work securely when you’re remote.
- [How to safeguard your devices](https://security.geant.org/how-to-safeguard-your-devices/): Find out how to safeguard your devices by building a few simple habits. Protect not only your device, but also your work, your accounts and your data.
- [[Article] Small Habits. Big Impact.](https://security.geant.org/article-small-habits-big-impact/): Simple security habits can make a big difference. GÉANT invites the research and education community to get involved in Small Habits. Big Impact, our 2026 cybersecurity awareness campaign. Cybersecurity is part of everyday working life: keeping software up to date, checking where an application comes from, protecting a device while travelling, being careful with removable
- [Security awareness](https://security.geant.org/awareness/): GÉANT aims to provide security awareness insights while pointing out where to get support and what is most crucial in the fight against cybercrime.
- [Training and events](https://security.geant.org/training-and-events/): A key part of securing our infrastructure is our exceptional training and events throughout all domains at GÉANT. Training is provided in a variety of ways.
- [[Webinar] Nine point eight out of ten. Now what?](https://security.geant.org/nine-point-eight-out-of-ten-now-what/): A vulnerability gets a score of 9.8 out of 10. What do you do next? Numbers have a powerful influence on how we make decisions. A vulnerability marked critical can send us into immediate action, while something rated Low might wait for the next maintenance window. But a score doesn’t necessarily tell us what matters
- [Responsible Disclosure](https://security.geant.org/responsible-disclosure/): Responsible Disclosure: If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible.
- [security.txt](https://security.geant.org/security-txt/): Contact: mailto:cert@geant.org Contact: https://www.trusted-introducer.org/directory/teams/geant-cert.html Expires: 2026-12-31T22:59:00.000Z Encryption: PGP fingerprint: 3CBF F211 8305 635D 5839 BB27 BA6B F34A 9983 3085
- [Contact the GÉANT CERT](https://security.geant.org/contact/): For any questions or queries about GÉANT's security activities please contact the GÉANT CERT using the form in this web page.
- [Contact form: Cybersecurity Awareness Campaign](https://security.geant.org/contact-cybersecurity-campaign/): To find out more about GÉANT's annual Cybersecurity Awareness Campaign, please get in touch via the contact form in this web page.
- [CLAW](https://security.geant.org/claw/): The CLAW workshop consists of sessions addressing different facets of crisis management, opportunities to share knowledge and a crisis management exercise.
- [Discover more about CLAW 2026 a crisis management workshop](https://security.geant.org/claw-2026/): CLAW 2026 is taking place from 23–24 November 2026 at the Universität Wien, in Vienna, Austria. The event will be hosted by ACOnet, the Austrian NREN.
- [CLAW 2025](https://security.geant.org/claw-2025/): CLAW 2025 will bring together experts, practitioners, and professionals from the international NREN community to explore the challenges of crisis management.
- [GÉANT Cybersecurity Campaign 2025](https://security.geant.org/cybersecurity-campaign-2025/): GÉANT Cybersecurity Campaign 2025: Be mindful. Stay safe. As AI-deception grows, a mindful pause can make all the difference.
- [Security Days](https://security.geant.org/security-days/): GÉANT Security Days is one of the prominent security conferences for the international research and education community.
- [Contact form Security Days](https://security.geant.org/contact-form-security-days/): Contact form Security Days: Get in touch to find out more about GÉANT Security Days, a conference for the international research and education community.
- [PAW 2025: a report](https://security.geant.org/paw-2025/): PAW 2025 took place in April 2025. One of the main goals behind creating PAW was to develop material that could be easily reused and adapted by others.
- [CLAW 2022: a review](https://security.geant.org/claw-2022-a-review/): CLAW 2022: A review - Crisis management and communication are crucial to organisations. They guarantee continuity, help to build trust and protect reputation.
- [CLAW 2019: crisis, creativity and fun](https://security.geant.org/claw-2019-crisis-creativity-and-fun/): CLAW 2019: Crisis, creativity and fun - 75 participants from all over Europe met to immerse themselves in talks and training sessions about crisis management.
- [CLAW 2018: crisis in Guilder](https://security.geant.org/claw-2018-crisis-in-guilder/): CLAW 2018 consisted of a crisis exercise (Crisis in Guilder), lightning talks and training sessions. The event took place at the University of Malaga, Spain.
- [CLAW 2017: surviving the crisis together](https://security.geant.org/claw-2017-surviving-the-crisis-together/): Surviving the crisis together: At CLAW 2017 40 representatives from 20 NRENs met in Malaga for the first CLAW crisis management workshop organised by GÉANT.
- [CLAW 2018: a review](https://security.geant.org/claw-2018-a-review/): CLAW 2018: A review - Over 60 representatives from security, network operations and marcomms from the NREN community gathered in Malaga for a two-day workshop,
- [Let me hack you: a different kind of social engineering](https://security.geant.org/let-me-hack-you/): Let me hack you: A different kind of social engineering. At Security Days 2024 we invited participants to take part in a social engineering exercise.
- [Security Days 2025: a review](https://security.geant.org/security-days-2025-a-review/): Security Days 2025: A review - Security Days 2025 brought together more than 160 participants from 63 organisations across 28 countries.
- [Security Days 2024: a review](https://security.geant.org/security-days-2024-a-review/): Security Days 2024: A review. Collaboration, best practices and knowledge are the common threads arising from the talks and discussions at Security Days.
- [Security Days 2027: save the date!](https://security.geant.org/security-days-2027-save-the-date/): Mark your calendar for 6 -8 April 2027 as Security Days returns! It will take place at the Hotel Van der Valk, Haarlem, the Netherlands. Security continues to evolve in response to emerging technologies, shifting threat landscapes, and growing interdependencies across organisations and sectors. Keeping pace also depends on sharing knowledge, learning from experience, and
- [Interview: Nancy Beers, Sanne Cyber and Happy Game Changers](https://security.geant.org/interview-nancy-beers/): In her 2026 Security Days keynote “Play More Today. Secure Tomorrow,” Nancy Beers brought a refreshing and unconventional perspective to the conference stage in Utrecht this April. It was a keynote few participants will forget. The session kept the audience on their feet actively moving, engaging, and laughing, while also prompting deeper reflection on the
- [Security Days 2024](https://security.geant.org/geant-security-days-2024/): GÉANT Security Days 2024 took place in April 2024 in Prague, Czech Republic. The theme was Securing Tomorrow's Knowledge.
- [Compliance](https://security.geant.org/compliance/): Compliance plays a critical role in how GÉANT maintains strong security and meets regulatory expectations.
- [ISO 27001 Certification](https://security.geant.org/iso-27001-certification/): Achieving ISO 27001 Certification demonstrates GÉANT’s ongoing commitment to information security, risk management, and continuous improvement.
- [Security Innovation Lab](https://security.geant.org/geant-security-innovation-lab/): The GÉANT Security Innovation Lab is designed as a dedicated, hands-on environment for security experimentation and development.
- [Security Days 2026](https://security.geant.org/geant-security-days-2026/): Security Days 2026 will explore how collective intelligence, shared experience, and coordinated security measures are shaping the future of cybersecurity.
- [TALON 2026: European Crisis Simulation for NRENs](https://security.geant.org/talon-2026/): Developed under the GÉANT project, TALON 2026 was the first large-scale, cross-border crisis simulation designed specifically for Europe’s NRENs.
- [Security Awareness Resources Hub](https://security.geant.org/security-awareness-resources-hub/): Our Security Awareness Resources Hub features materials developed by GÉANT, tools made available by NRENs to the community, and more general sources.
- [Insights from TALON 2026](https://security.geant.org/insights-from-talon-2026/): Insights from TALON 2026
- [Contact: Security Bootcamp](https://security.geant.org/contact-security-bootcamp/): Contact: Security Bootcamp | To host a Security Bootcamp for your NREN and to find out more, please contact Ana Alves, GÉANT CISO via the contact form.
- [DDoS Cleansing and Alerting](https://security.geant.org/ddos-mitigation-service/): The DDoS Mitigation Service is designed for users of GÉANT's peering services, which allows GÉANT to dynamically detect and mitigate attacks.
- [EU NIS2 Directive](https://security.geant.org/nis2/): The EU Network and Information Security Directive (NIS2) strengthens Europe’s collective cybersecurity posture and sets a higher standard for resilience.
- [Supporting secure collaboration and compliance across Europe](https://security.geant.org/supporting-secure-collaboration-and-compliance-across-europe/): Supporting secure collaboration and compliance across Europe: GÉANT’s ISO 27001 certification.
- [Security Baseline](https://security.geant.org/baseline/): In order to harmonise the security level of NRENs, the Security Baseline as a common framework was created. This security baseline can be used in various ways.
- [[Webinar and practical workshop] Designing incident reporting systems in cybersecurity](https://security.geant.org/designing-incident-reporting-systems/): Webinar and practical workshop: Designing incident reporting systems in cybersecurity. How can we make reporting easier, safer, and a part of everyday practice?
- [[Interview and webinar recording] Inside PDCA: a practical framework for sustainable cybersecurity awareness](https://security.geant.org/a-practical-framework-for-sustainable-cybersecurity-awareness/): The PDCA approach to cybersecurity awareness: structuring behavioural change for lasting impact Most security awareness campaigns follow a familiar rhythm: a poster here, a phishing simulation there, a burst of activity during Cybersecurity Month. Then the campaign ends, and everyone goes back to business as usual. That’s the cycle that Rosanne Pouw, Product Manager for
- [[Cybersecurity expert's opinion] The comfort trap: how automation can make us forget how to think](https://security.geant.org/how-automation-can-make-us-forget-how-to-think/): By Panayiota Smyrli, Cybersecurity Engineer @ Digital Security Authority We live in an age where critical thinking can feel optional. Artificial intelligence finishes our sentences, plans our routes, and drafts our ideas. Apps anticipate what we want before we know it ourselves. Life has never been more convenient, or more automatic. And yet, beneath that
- [[Webinar] The PDCA approach to cybersecurity awareness](https://security.geant.org/the-pdca-approach-to-cybersecurity-awareness/): [Webinar] The PDCA Approach to Cybersecurity Awareness
- [[Interview and webinar recording] AI and the human factor](https://security.geant.org/interview-ai-and-the-human-factor/): AI and the human factor: from blind trust to mindful action. Interview with Maria Bada, Senior Lecturer at Queen Mary University, London.
- [Interview: Dr Karen Renaud, University of Strathclyde](https://security.geant.org/interview-dr-karen-renaud-university-of-strathclyde/): At this year’s Security Days, held on 8-10 April, participants were treated to a powerful keynote by Dr Karen Renaud from the University of Strathclyde. Her talk, titled “To trust or to distrust… THAT is the question,” challenged conventional wisdom on trust in cybersecurity, prompting the audience to re-evaluate where and how trust is placed
- [Interview: Dr David Modic, University of Ljubljana](https://security.geant.org/unlocking-the-human-factor-in-cybersecurity/): Unlocking the human factor in cybersecurity: Interview with Dr David Modic from the Faculty of Computer and Information Sciences, University of Ljubljana.
- [[Cybersecurity expert's opinion] AI Policies](https://security.geant.org/ai-policies/): AI Policies: Supporting our community, leading by example - Words by: Daniella Vendramini, Team Lead for IT Compliance within ICT Security Services at HEAnet.
- [[Webinar] AI, cybersecurity and the human factor](https://security.geant.org/ai-cybersecurity-and-the-human-factor/): CONNECT news article - [Webinar] AI, Cybersecurity and the human factor: Building resilience in the age of intelligent threats.
- [Security Operations Centre](https://security.geant.org/security-operations-centre/): The team in the Security Operations Centre work to secure, monitor, and maintain GÉANT's extensive cutting-edge network and infrastructure.
- [Firewall On Demand](https://security.geant.org/firewall-on-demand/): Firewall on Demand allows authorised users to quickly create and disseminate firewall filters based on traffic flows to or from their designated address space.
- [NeMo DDoS software](https://security.geant.org/nemo-ddos-software/): NeMo DDoS software is a powerful tool for Netflow-based DDoS and traffic anomaly detection and analysis. It can be installed locally by GÉANT-associated NRENs.
- [[Cybersecurity expert's opinion] How AI is changing the phishing game](https://security.geant.org/ai-is-changing-the-phishing-game/): Cybersecurity expert's opinion: How AI is changing the phishing game. Words by Laura Pooley, Senior Information Security Officer at Jisc.
- [[Cybersecurity expert's opinion] AI-driven threats in cybersecurity](https://security.geant.org/ai-driven-threats-in-cybersecurity/): AI-driven threats in cybersecurity: words by Louise Altvater, Security Analyst at CSIRT FCT, the team responsible for incident response within FCCN.
- [Training](https://security.geant.org/training/): GÉANT organises a range of security training events to support its community. Find out more about current and future training opportunities.
- [Security Bootcamp](https://security.geant.org/security-bootcamp/): The Security Bootcamp is an innovative programme that aims to provide hands-on experience and training sessions to National Research and Education Networks.
- [Security Days 2025](https://security.geant.org/geant-security-days-2025/): We are excited to announce that GÉANT Security Days 2025 will take place from 8-10 April 2025 at The Hotel Grandior, Prague, Czech Republic.
- [[Interview and webinar recording] Rethinking cybersecurity awareness](https://security.geant.org/moving-security-awareness-from-blame-to-empowerment/): CONNECT news article - Beyond fear: Moving security awareness from blame to empowerment and shared responsibility.
- [[Interview and webinar recording] Ditching multitasking for meta-awareness](https://security.geant.org/ditching-multitasking-for-meta-awareness/): CONNECT news article - Ditching multitasking for meta-awareness: How digital mindfulness can protect us against social engineering.
- [[Cybersecurity expert's opinion] Resilience against social engineering](https://security.geant.org/resilience-against-social-engineering/): Social engineering is a common method used by cybercriminals to target people, and the advent of generative AI has significantly worsened the situation.
- [Products and Services](https://security.geant.org/services/): Find out about GÉANT security products and services such as DDoS mitigation and Firewall on Demand. Also download the latest GÉANT security portfolio leaflet.
- [TALON reaches full capacity](https://security.geant.org/talon-reaches-full-capacity/): TALON reaches full capacity. TALON is designed to challenge participating organisations to respond to a realistic, high-pressure crisis scenario in real time.
- [Introducing TALON: Europe’s first cross-border crisis exercise for NRENs](https://security.geant.org/introducing-talon/): Introducing TALON: In March 2026, we will launch TALON, the very first simulation-based crisis exercise designed specifically for NRENs.
- [SOC Tools for NRENs](https://security.geant.org/soctools/): SOC Tools for NRENS: As the need for SOC operations arose within the NREN community, the GÉANT project created an interoperable set of tooling for NRENs
- [Interview: Vladislav Bidikov, Ss. Cyril and Methodius University in Skopje](https://security.geant.org/interview-vladislav-bidikov/): Interview: Vladislav Bidikov, Ss. Cyril and Methodius University in Skopje, North Macedonia - From Crisis to Classroom: Teaching Crisis Management.
- [Interview: Professor Roland van Rijswijk-Deij, University of Twente](https://security.geant.org/interview-professor-roland-van-rijswijk-deij-university-of-twente/): Interview: Professor Roland van Rijswijk-Deij, University of Twente. Roland presented the keynote ‘Moving the goal to post quantum’ at Security Days 2024.
- [​Trusted Certificate Service](https://security.geant.org/services/tcs/): Increasing online security by facilitating the deployment of digital certificates. On 1st May 2020, GÉANT launched its Trusted Certificate Service (TCS). TCS takes advantage of a bulk purchasing arrangement whereby participating national research and education networking organisations (NRENs) may issue close to unlimited numbers of certificates provided by a commercial CA at a significantly reduced price.
- [Interview: Charlie van Genuchten, SURF](https://security.geant.org/interview-charlie-van-genuchten-surf/): CONNECT meets Charlie van Genuchten, Product Manager Security from SURF to talk about CLAW, the Crisis Management workshop for the GÉANT community.
- [CLAW 2023 online](https://security.geant.org/claw-2023-online/): Almost 70 NREN representatives from Europe and Canada gathered remotely to attend CLAW 2023 online – a simulation exercise of a crisis situation.
- [Interview: Maria Edblom Tauson, SUNET](https://security.geant.org/interview-maria-edblom-tauson-sunet/): CONNECT meets Maria Edblom Tauson, Senior Security Officer for SUNET in Sweden to talk about CLAW, the Crisis Management workshop for the GÉANT community.
- [CLAW 2024 crisis exercise](https://security.geant.org/claw-2024-crisis-exercise/): From chaos to resilience: Key takeaways from the CLAW 2024 crisis exercise. Words: Fabio Greiner (Switch) and Jana Ernekerová (Cesnet).
- [My first CLAW](https://security.geant.org/my-first-claw/): My first CLAW: Zoë Fischer, GÉANT. In December 2023 I had the opportunity to attend the CLAW, the crisis management workshop for the GÉANT community.
- [GÉANT CERT](https://security.geant.org/geant-cert/): The SOC team provide the GÉANT CERT function to secure the logical and physical infrastructure of the GÉANT network and all data crossing the network.
- [SIG-ISM](https://security.geant.org/sig-ism/): The GÉANT SIG – Information Security Management (SIG-ISM) is a forum for interchanging knowledge and experiences on information security management topics.
- [Contact form TCS](https://security.geant.org/contact-form-tcs/): Contact form TCS - To find out more about Trusted Certificate Services​, ​please contact the TCS Service Owner by completing this contact form.
- [Security Days Programme](https://security.geant.org/security-days-programme/)
- [Cookie Policy (EU)](https://security.geant.org/cookie-policy-eu/)
- [Contact us](https://security.geant.org/contact-us/): With a wide range of disciplines our professionals cover all aspects of security. To find out more about the GÉANT Security Operations Centre, contact us.
- [RFC 2350](https://security.geant.org/rfc-2350/): The SOC assists NRENs in mitigating or recovering from security incidents. RFC 2350 governs the expectations for computer security incident response.
- [Affiliates](https://security.geant.org/affiliates/): Affiliates: GÉANT SOC is actively engaged in the European and international CSIRT community, and is a member of TF-CSIRT, Trusted Introducer, and FIRST.
- [Security News Updates](https://security.geant.org/security-news-updates/): Use this page to post security news updates for the monthly newsletter:
- [home with slider](https://security.geant.org/home-with-slider/)
- [test](https://security.geant.org/test/): even more stuff
- [Security News](https://security.geant.org/security-news/)
- [Firewall on Demand](https://security.geant.org/services/fod/): What is Firewall on Demand? Firewall on Demand, abbreviated as FoD, is an application with a WEB front which allows eduGAIN (and not only) NOC/CERT users to disseminate firewall filters within seconds, in order to defend against DdoS attacks. Why Use Firewall on Demand? Speed - Time to disseminate/withdraw firewall filters is sub 10 seconds
- [Training](https://security.geant.org/training-and-events/training/): The GÉANT GN4 project has arranged a series of training events to support the community. The training events have been offered live throughout 2020 / 21. Previously run sessions are available for viewing on GÉANTTV. Operating system privacy and security Operating System Telemetry – configuring protection in Windows 10 (slides) (recording) Logging and Audit –
- [VPN Services](https://security.geant.org/services/vpn/)

## Categories

- [Uncategorized](https://security.geant.org/category/uncategorized/)
- [Services](https://security.geant.org/category/services/)
- [Events](https://security.geant.org/category/events/)
- [Featured](https://security.geant.org/category/featured/)
- [Community](https://security.geant.org/category/community/)
- [Security](https://security.geant.org/category/security/)
- [Trust and identity](https://security.geant.org/category/trust-and-identity/)
- [Awareness](https://security.geant.org/category/awareness/)
- [Training](https://security.geant.org/category/training/)
- [SOC](https://security.geant.org/category/soc/)
- [security newsletter](https://security.geant.org/category/security-newsletter/)

## Tags

- [CONNECT33](https://security.geant.org/tag/connect33/)
- [cyber security](https://security.geant.org/tag/cyber-security/)
- [NRENs](https://security.geant.org/tag/nrens/)
- [security](https://security.geant.org/tag/security/)
- [LifeatGÉANT](https://security.geant.org/tag/lifeatgeant/)
- [collaboration](https://security.geant.org/tag/collaboration/)
- [training](https://security.geant.org/tag/training/)
- [workshop](https://security.geant.org/tag/workshop/)
- [community](https://security.geant.org/tag/community/)
- [Task Force](https://security.geant.org/tag/task-force/)
- [TF-CSIRT](https://security.geant.org/tag/tf-csirt/)
- [CONNECT34](https://security.geant.org/tag/connect34/)
- [CyberSecMonth](https://security.geant.org/tag/cybersecmonth/)
- [cybersecurity](https://security.geant.org/tag/cybersecurity/)
- [DFN](https://security.geant.org/tag/dfn/)
- [Ransomware](https://security.geant.org/tag/ransomware/)
- [CONNECT35](https://security.geant.org/tag/connect35/)
- [Social Engineering](https://security.geant.org/tag/social-engineering/)
- [COVID](https://security.geant.org/tag/covid/)
- [Jisc](https://security.geant.org/tag/jisc/)
- [GARR](https://security.geant.org/tag/garr/)
- [SWITCH](https://security.geant.org/tag/switch/)
- [Phishing](https://security.geant.org/tag/phishing/)
- [Belnet](https://security.geant.org/tag/belnet/)
- [HEAnet](https://security.geant.org/tag/heanet/)
- [COVID-19](https://security.geant.org/tag/covid-19/)
- [CLAW](https://security.geant.org/tag/claw/)
- [Marnet](https://security.geant.org/tag/marnet/)
- [RENATER](https://security.geant.org/tag/renater/)
- [research](https://security.geant.org/tag/research/)
- [SaNREN](https://security.geant.org/tag/sanren/)
- [TENET](https://security.geant.org/tag/tenet/)
- [ARNES](https://security.geant.org/tag/arnes/)
- [SURF](https://security.geant.org/tag/surf/)
- [edugain](https://security.geant.org/tag/edugain/)
- [RedIris](https://security.geant.org/tag/rediris/)
- [trustandidentity](https://security.geant.org/tag/trustandidentity/)
- [LITNET](https://security.geant.org/tag/litnet/)
- [CSC](https://security.geant.org/tag/csc/)
- [EaPConnect](https://security.geant.org/tag/eapconnect/)
- [GRENA](https://security.geant.org/tag/grena/)
- [SIG-ISM](https://security.geant.org/tag/sig-ism/)
- [TNC21](https://security.geant.org/tag/tnc21/)
- [inthefield](https://security.geant.org/tag/inthefield/)
- [inthefieldstories](https://security.geant.org/tag/inthefieldstories/)
- [CyberHeroAtHome](https://security.geant.org/tag/cyberheroathome/)
- [nositemap](https://security.geant.org/tag/nositemap/)
- [noindex](https://security.geant.org/tag/noindex/)