All News

    You are here:  
  1. Home
  2. All News
Be cyber aware in orange text on a blue background above a blue mobile phone, blue key store, blue key and a blue shield with a green tick inside it.
Information/Cyber Security

The NSA and CISA Red and Blue teams recently shared the top ten cyber security misconfigurations.  The schools we have worked with that have suffered a cyber attack often find that there are configurations, upgrades or user access controls that were missed.  This advisory highlights all of those and more - these are not in-depth configurations, but often ones that are set up incorrectly and then not checked or updated as time goes by. Although the advisory is aimed at larger organisations, we think it applied to all and will help towards becoming more cyber resilient.

Childrens hands showing their palms each with a letter from the word 'Safety'. Blue text: "Online Safety Act Becomes Law"
Information/Cyber Security

The UK Online Safety Bill became law on Thursday 26th October.  The UK Government says the Online Safety Act will protect people, particularly children, on the internet.  The Act should make social media companies keep the internet safe for children and give adults more choice over what they see online.  Ofcom will immediately begin work on tackling illegal content and protecting children's safety.

Be cyber aware in blue text on blue mobile phone with key
Information/Cyber Security

We previously reported on some schools that had sufferred ransomware attacks, namely Thomas Hardye in Dorset.  It has since been discovered the attack was by the hacker group that goes by the name "Rhysida".  
The attack methodology used was by exploiting a known vulnerability in PaperCut.  Other schools have reportedly suffered the same attack from the group.

Cyber in blue text, resilience in orange text on a comnputer screen with all things cyber related around
Information/Cyber Security

We wanted to highlight an organisation called the National Cyber Resilience Centre Group which consists of nine regional centres in the UK that were set up to strenghten the reach of cyber resilience across the business community.

A coalitiion of police, government, large employers and organisations and academia are supporting the growth of the Cyber Resilience Centre Network.

Email on a pink key on a white keyboard
Information/Cyber Security

The ICO has recently published new guidance about bulk email communications following a number of data breaches caused by the incorrect usage of CC and BCC (carbon copy and blind carbon copy). 

Emails sent to the wrong person or emails copied rather than blind copied to customers/parents are the most common data breaches seen and are often because someone is rushing or under pressure.

Be cyber aware in orange text on a blue background above a mobile phone and padlock. Also the Data Protection Education logo
Best Practice Updates

The time following a cyber attack can be very stressful, and in the heat of the moment it can be difficult to know what the best thing to do between working out what went wrong, how to recover and what went missing, it can be hard to know where to start first.

We provide some help and guidance in our Information and Cyber Security Best Practice Area, which also includes the checklist:  document What to do immediately after a Cyber Attack(58 KB) .

  1. VICE SOCIETY - Ransomware attacks on schools
  2. Using Tags if you are a group of organisations in the DPE Knowledge Bank
  3. Where's Harry the Hacker?
  4. Be Cyber Aware: USB Sticks
  5. Cyber Insurance in the Public Sector
  6. Types of Cyber Attacks: DDos Attack (Microsoft DDoS Attack in June)
  7. Cyber Attack: Leytonstone School
  8. Be Cyber Aware: Firewalls
  9. Be Cyber Aware: Cyber attacks and transparency. A no blame culture
  10. Cyber Attack: Dorchester School
  11. Knowledge Bank Role Types: Admin, Staff and Trustee
  12. Types of Cyber Attacks: Password Attacks
  13. Be Cyber Aware: Why regular software updates are important
  14. Cyber Attack: Wiltshire School
  15. Keeping your IT systems safe and secure
  16. Why we recommend using PIN codes on printers
  17. Types of Cyber Attacks: DDoS Attacks
  18. Types of Cyber Attacks: Phishing
  19. Redaction Guidelines Updated
  20. Types of Cyber Attacks: The Insider Threat
  21. Why your data is profitable to cyber criminals
  22. Using WhatsApp in Schools
  23. Knowledge Bank Updates
  24. Types of malware and how they are linked to data protection
  25. Windows Server 2012 & 2012 R2 Retirement
  26. How to contact us for support, subject access requests, data breaches and FOI's
  27. How a school fought back after a cyberattack
  28. Types of Cyber Attacks - Credential Stuffing
  29. January Cyber update - How Can Schools Help Prevent Cyber Attacks?
  30. Assigning courses to staff using to-dos
  31. The Education sector now at highest risk of cyber attacks
  32. Cyber Attacks
  33. Best Practice for Managing Photos and Video
  34. Compliance Manager released
  35. Emails – good practice and minimising the risk of a data breach

General news

Information/Cyber Security

Knowledge Bank Updates

Best Practice Updates

Legal

Events & Podcasts

©2026 Data Protection Education Ltd.

Search