THREAT INTEL: JISC JISC Exposed to significant security vulnerabilities across its technology platforms

Gibraltar: Tuesday 25 June 2024 at 11:50 CET

THREAT INTEL: JISC Exposed to significant security vulnerabilities across its technology platforms and Internet Assets and have been for years.

By Andy Jenkinson – Guest Contributor | Group CEO Cybersec Innovation Partners
via IainFRASER.net/CYBERInsights
First for SME Cybersecurity News
Google Indexed on 250624 at 12:00 CET

#CyberInsights #CyberThreatIntel #Cybersecurity #WhitethornShield #InternetSecurity #Cybercrime #DNS #PKI #WhitethornShield #InternetSecurity #DNS #PKI

The Joint Information Systems Committee (Jisc), established on April 1, 1993, under guidance from the Higher Education Funding Councils for England, Scotland, and Wales, are exposed to significant security vulnerabilities across its technology platforms and Internet Assets and have been for years.

Despite our repeated notifications to Jisc‘s CEO, executive, and security team, about these issues—ranging from insecure logins to misconfigured and critical servers—no remedial actions have been taken, just threats of legal action.

Alarmingly, in 2023 alone, 347 schools under Jisc‘s technical management reported Cyberattacks, averaging nearly one attack per day. The single point of failure – Jisc insecure servers.

Jisc, which partners with the National Cyber Security Centre (NCSC part of GCHQ) to provide ‘Share & Defend’ cyber security services, including Protective Domain Name Service (PDNS), appears to be failing in its cybersecurity responsibilities.

NCSC’s partnership with Jisc raises serious concerns about the adequacy of cyber protection for more than just UK schools and the safety of the children they serve. This negligence could be contributing to an environment conducive to cybercrime. More /…

The National Society for the Prevention of Cruelty to Children (NSPCC) reports that 500,000 children are abused annually in the UK, underlining the gravity of the situation. The apparent disregard for fundamental security measures by Jisc and, by extension, the NCSC, poses severe risks and demands urgent attention.

Two weeks ago we handed information and transcripts to the Information Commissioner’s Office and hope they take serious steps to hold Jisc to account for negligence.

Jisc employs in excess of 1000 people. All are paid by the UK taxpayer. Let us hope our sharing information only highlights negligence and nothing more criminal or sinister.

These million of children are ‘OUR’ children, they deserve protecting much better than this…

Cybersec Innovation Partners
BBC News
ITV News
FT News
Serious Fraud Office (UK)
Metropolitan Police
Regional Cyber Crime Unit – West Midlands (RCCU WM)

About Andy Jenkinson

Group CEO CIP. Fellow Cyber Theory Institute. Director Fintech & Cyber Security Alliance (FITCA) working with Governments. Recognised Expert in Internet Asset & DNS Vulnerabilities.

Andy Jenkinson is a senior and seasoned innovative Executive with over 30 years’ experience as a hands-on lateral thinking CEO, coach, and leader. A ‘big deal’ business accelerator, and inspirational, lateral thinker, Andy has crafted, created, and been responsible for delivering 100’s £ millions of projects within the Cyber, Technical, Risk and Compliance markets for some of the world’s largest, leading organisations. Andy has a demonstrable track record of largescale technical delivery and management within many sectors including the Professional, Managed, and Financial Services.