Study maps phishing cluster aimed at German-speaking universities
Authors count 25 confirmed campus attacks from February 2022 to February 2023, affecting 5% of German universities.
Stories per day · 30 days
2 RSS
Relatedcredential-theft2deepseek2unit-422compromised-credentials1copyright-takedowns1germany1government1hermes-agent1india1mirai1mongodb1onlyfans1phishing1php1php2shell1rce1seo-spam1upguard1
14 stories, newest first · one card per story
Stories tagged #universities
Attackers use public PHP2Shell exploits against university and business sites
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated command execution; fixed PHP builds shipped on October 21.
Attacker used DeepSeek to steal 5,200 Indian university records
Unit 42 says a weak administrator password, not a new software flaw, exposed the MongoDB holding student and staff data.
Unit 42: BUGSTER used DeepSeek V4 in India university data theft
The actor brute-forced a site and stole more than 5,200 student and faculty PII records, Unit 42 says.
OnlyFans takedown requests reveal compromised university and government sites
UpGuard says adult-content copyright notices can show when attackers used legitimate sites for search spam.
2
Four Compliance Frameworks, One Security Team. How Universities Can Stop Drowning in Regulatory Risk
Rapid7 says universities face FERPA and GLBA clocks, including a 24-hour financial-aid breach notice.
MI5 Raises Alarm Over Chinese Funding of UK Academic Research
MI5 warns MSS-linked CGTRI funded research involving more than 100 UK academics, some unknowingly.
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
Montenegro approved extraditing Amir Barati over an alleged IRGC-linked theft of 31TB from universities.
3
Iranian accused of hacking American universities extradited from Montenegro
Montenegro extradited Iranian hacker Amir Barati, charged over the Mabna Institute university data-theft campaign.
4
Higher education is under siege, and fragmented security is making it harder to respond
Rapid7 says multi-campus universities face rising attacks while fragmented security slows response.
1
openEQUELLA authenticated RCE chain(s)
Authenticated deserialization flaws in openEQUELLA can be chained into remote code execution.
US charges Iranians for sprawling hacking campaign on government agencies, universities
DOJ indicts 17 Iranians tied to Mabna Institute IRGC hacking-for-hire campaign that stole 31TB from universities, agencies, and UN organizations.
2
Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
US prosecutors unsealed a superseding indictment charging 17 Iranians in the Mabna Institute's state-sponsored theft of 31.5 terabytes from universities and companies.
1
Education Under Attack: The Pattern Behind Recent University Breaches
Huntress finds four recent university breaches share one root cause, security misconfigurations, and outlines fixes for higher education.
1