THREAT INTEL: JISC JISC Exposed to significant security vulnerabilities across its technology platforms

Gibraltar: Tuesday 25 June  2024 at 11:50 CET

THREAT INTEL: JISC Exposed to significant security vulnerabilities across its technology platforms and Internet Assets and have been for years.

By Andy Jenkinson – Guest Contributor |  Group CEO Cybersec Innovation Partners
via IainFRASER.net/CYBERInsights
First for SME Cybersecurity News
Google Indexed on 250624 at 12:00 CET

#CyberInsights #CyberThreatIntel #Cybersecurity #WhitethornShield #InternetSecurity #Cybercrime #DNS #PKI  #WhitethornShield #InternetSecurity #DNS #PKI

The Joint Information Systems Committee (Jisc), established on April 1, 1993, under guidance from the Higher Education Funding Councils for England, Scotland, and Wales, are exposed to significant security vulnerabilities across its technology platforms and Internet Assets and have been for years.

Despite our repeated notifications to Jisc‘s CEO, executive, and security team, about these issues—ranging from insecure logins to misconfigured and critical servers—no remedial actions have been taken, just threats of legal action.

Alarmingly, in 2023 alone, 347 schools under Jisc‘s technical management reported Cyberattacks, averaging nearly one attack per day. The single point of failure – Jisc insecure servers.

Jisc, which partners with the National Cyber Security Centre (NCSC part of GCHQ) to provide ‘Share & Defend’ cyber security services, including Protective Domain Name Service (PDNS), appears to be failing in its cybersecurity responsibilities.

NCSC’s partnership with Jisc raises serious concerns about the adequacy of cyber protection for more than just UK schools and the safety of the children they serve. This negligence could be contributing to an environment conducive to cybercrime. More /…