Cyber Threats to Education

The report describes how universities and higher-education institutions were heavily targeted in 2021—experiencing waves of ransomware (including double-extortion), DDoS attacks, and Log4J exploitation by threat actors such as Aquatic Panda—driven by an expanded attack surface from remote learning and cloud adoption, with initial access brokers and public data dumps exacerbating impacts.