7 Ways Your Kid’s Data Is Worth Less Than a VHS Tape https://substack.com/home/post/p-213008498
Remote
Doug Levin
@douglevin@infosec.exchange
mastodon 4.8.0-alpha.3+glitchCo-Founder and Director, K12 Security Information eXchange (K12 SIX), the ISAC of the U.S. K-12 (primary/secondary) education community. Focused on helping to prevent and mitigate education cyber incidents at scale.
30+ years experience - exclusively with non-profits - at intersection of education, public policy, research, and technology.
0 Followers
0 Following
29 Posts
Joined November 10, 2022
Website:
Location:
Inside the Beltway
For the love of all that is good and holy, can a reporter please contact Navigate360 and inquire about the status of their serious and massive March 2026 data breach? https://fortiguard.fortinet.com/threat-actor/6385/internet-yiff-machine
There is a conspiracy of silence surrounding not only the company but all its partners (they white label their service to virtually everyone in the U.S. and Canada, including CrimeStoppers and Sandy Hook Promise), as it involves an anonymous tip reporting service for law enforcement and schools.
As of yet - and surely in violation of state breach notification laws - the company has yet to make ANY public disclosures about the status of their investigations or notify victims. Moreover, the breach raises serious concerns about the security of their software and practices.
Want to know more - including proof of breach - @PogoWasRight@infosec.exchange has the receipts: https://databreaches.net/?s=navigate360
cc/ @zackwhittaker@mastodon.social @404media@flipboard.com @dangoodin@infosec.exchange @kcoxdc@journa.host @arstechnica@mastodon.social @andrew_writes@mastodon.online @dell@journa.host @lhn@mastodon.online @mattburgess@infosec.exchange
Anyone willing to bet that this prediction/forecast about the AI spend in US K-12 will be remotely true? IMHO, 0% chance. #edtech #ai @funnymonkey@freeradical.zone
Via https://www.csmonitor.com/USA/Education/2026/0807/ai-risks-schools-students
Washington Post Editorial Board arguing that the way to address U.S. water utility cyber insecurities......is to have them pull themselves up by their bootstraps. 🙄 🙄 🙄
That, and cut regulatory burden...
Link (paywall): https://www.washingtonpost.com/opinions/2026/08/03/water-system-cyberattacks-are-wake-up-call/
Archive link: https://archive.ph/1vbs1#selection-469.0-478.0
US Dept of Education (ED): We think schools should do more with AI. What do you think?
Public: (waving hands) some privacy and security, please https://www.k12six.org/news/k12-six-comments-on-secretarys-supplemental-priority-on-advancing-artificial-intelligence-in-education
ED (yesterday): "The Department believes that how best to ensure the safety and communicate about technology use is optimally decided at the state and local level and declines to enact requirements at the federal level." https://public-inspection.federalregister.gov/2026-07087.pdf
Public: That's not good. Guess we should work on passing some state laws.
White House: Nope, like we said (in Dec 2025), no state laws on AI. https://www.whitehouse.gov/presidential-actions/2025/12/eliminating-state-law-obstruction-of-national-artificial-intelligence-policy/
Public: ...
Replying to @PogoWasRight@infosec.exchange
@PogoWasRight@infosec.exchange @funnymonkey@freeradical.zone @mkeierleber@journa.host @euroinfosec@infosec.exchange @jgreig@ioc.exchange @zackwhittaker@mastodon.social @campuscodi@mastodon.social @politico@newsie.social @dustinvolz@journa.host “My opinion: So many high-visibility entities are culpable, no one wants to touch it.”
^^ the words of a colleague (federal bureaucrat) upon reading this new reporting
As I said, ‘a conspiracy of silence’…
Replying to @briankrebs@infosec.exchange
@briankrebs@infosec.exchange FWIW, exact same thing went down with PowerSchool, another big education company. ShinyHunters had publicy pantsed Instructure here and without drastically acting they would be out of business in a matter of weeks. Still going to be a rough road for them going forward. In an effort to preserve their own hide, they pushed the risk to the rest of us and basically just funded the next Salesforce-type campaign.
Replying to @0xabad1dea@infosec.exchange
@0xabad1dea@infosec.exchange been directly working incident response with schools across US and the answer in no
Replying to @douglevin@infosec.exchange
@tayfonay if you pry open the badge you can prob determine the make/model and then find user manuals and maybe even default creds online that match…hypothetically speaking, that is
Replying to @zackwhittaker@mastodon.social
@zackwhittaker@mastodon.social oh FFS - thanks for flagging the noindex
Senators seek answers about hackers obtaining sensitive student data from ostensibly anonymous tip line https://cyberscoop.com/maps360-student-data-breach-senate-investigation/ #P3Campus #breach #edtech #edusec @PogoWasRight@infosec.exchange
Replying to @SecureOwl@infosec.exchange
If Snow Crash is your idea of a roadmap for education reform via #edtech, pls touch grass. Thanks for coming to my Ted talk.
Replying to @douglevin@infosec.exchange
@sundogplanets@mastodon.social oh, ALSO - if it is on camera or not!
Replying to @douglevin@infosec.exchange
If this works as advertised, I am going to want a new umbrella...for research purposes, of course https://sites.google.com/view/secure-safe-ai/flytrap #drones #ai #adversarialumbrellas
FCC exempts Netgear from foreign router ban https://www.cybersecuritydive.com/news/fcc-netgear-foreign-router-ban-exemption/817560/
Alexandria man arrested for allegedly destroying multiple license plate readers https://www.alxnow.com/2026/07/14/alexandria-man-arrested-for-allegedly-destroying-multiple-license-plate-readers/
"A city resident alerted police...that a man parked a dark-colored Subaru Forester on the curb next to a Flock Safety Automatic License Plate Reader camera...“and climbed on top of the vehicle to destroy the Flock ALPR camera at that location with a baseball bat,” according to a recently released search warrant affidavit."
"The suspect was arrested sitting outside of his home and charged with an open container violation (a Class 4 misdemeanor), possessing a fake identification or driver’s license (a Class 2 misdemeanor) and destruction of property worth more than $1,000 (a Class 6 felony). "
A milestone for K12 SIX and the wider K-12 education community: "National Council of ISACs Welcomes K12 SIX, Extending Critical Infrastructure Threat Intelligence to the K-12 Education Sector" https://www.nationalisacs.org/post/national-council-of-isacs-welcomes-k12-six-extending-critical-infrastructure-threat-intelligence-to #edtech #ISAC #K12SIX
NY Attorney General James Secures Up to $17.1 Billion and Groundbreaking Reforms from Meta to Protect Children on Social Media https://ag.ny.gov/press-release/2026/attorney-general-james-secures-171-billion-and-groundbreaking-reforms-meta
Replying to @ZenHeathen@beige.party
@ZenHeathen@beige.party Yes, and - apparently - doing so while being younger than the legal age to drink alcohol.
Replying to @mattblaze@federate.social
@mattblaze@federate.social can confirm that local grocery is sold out of….sweet potatoes. End times are here.
Replying to @PogoWasRight@infosec.exchange
@PogoWasRight@infosec.exchange @funnymonkey@freeradical.zone I find it very hard to believe that 275M notices re: Canvas have been sent. So far as I know, notifications are still very much in progress.
Replying to @PogoWasRight@infosec.exchange
@PogoWasRight@infosec.exchange @funnymonkey@freeradical.zone I think it’s just a lazy claim for clicks. Nonetheless, imagine it’ll still be a large number when all is sorted out.
Replying to @raganwald@social.bau-ha.us
@raganwald@social.bau-ha.us I'm sorry, but I don't understand. Is this a question?