Alerts

Colleges rely on hundreds of external vendors for critical business applications, learning platforms,  pedagogy tools, cloud services, student support operations, and fundraising systems. When one of those vendors suffers a security failure, the consequences fall squarely on the institution—impacting critical systems and the students, faculty, and staff who use them. Robust third‑party risk reviews are […]

In last month’s newsletter, we covered the ShinyHunters cybercrime group and their role in the widespread Canvas breach. Fortunately, FIT was not impacted but unfortunately, the situation has only escalated. In recent weeks, ShinyHunters has claimed three additional major victims: Oracle PeopleSoft, a platform widely used across higher education; Kodak, a major New York–based technology […]

Earlier this month, Canvas, a major learning‑management system used by thousands of colleges and universities, disclosed a security incident involving unauthorized access to certain user data. While the investigation is ongoing, the breach has already triggered a wave of higher education‑themed phishing attacks across the country. Within days after the breach, universities across the country […]

Travel Scams Target Users of Booking Websites As the warmer months approach and people begin planning their summer getaways, cybersecurity experts are warning travelers about a growing wave of scams targeting hotel and reservation platforms. A recent breach at Booking.com has led to a surge in “reservation hijacking” attacks, in which criminals impersonate hotels and contact guests […]

Beware of FIFA World Cup Ticket Scams The FIFA World Cup is set to bring massive excitement to the NYC area this summer as fans from around the world flock to catch world‑class soccer matches. With global attention shifting toward the region, the surge in travel, ticket demand, and local celebrations is already creating a […]