Unwelcome news for districts impacted by the December PowerSchool data breach... www.edtechirl.com/p/powerschoo... #k12cyber

Automating account provisioning, RBAC, and least privilege is a great way to reduce human error and access sprawl. It's also more convenient for users, so it's the rare trade-off where added security = friendlier UX. Dynamic Groups are the cornerstone of how we manage that flow. #k12cyber

Super helpful new intern in the office today!

I just got off a call prepping for what should be a great panel at the AI Show @ASU+GSV in San Diego next month! If you're in the neighborhood, admission is free (but registration is required). Honored to be on a panel with such an esteemed group of folks! #k12cyber

It's almost like people making decisions about "efficiency" have no idea what the hell they're doing.

Working on building out the homelab tutorial section of the blog... #k12cyber

KASM is one of my favorite tools for privileged workstation usage (and a bunch of other stuff!). This is the 4th tutorial in the series on KASM, and this time focuses on setting up SSO using Microsoft and delegating container assignments based on Entra group. #k12cyber #homelab

How many districts can say they have a dedicated Data Protection Officer?! Join @phintz.bsky.social and @edtechirl.com as they chat with one such unicorn, Michelle Krieger, the DPO for LSCSD in New York about the challenges of implementing technology while maintaining privacy! #k12cyber

Inspired by the Cloud Resume Challenge, @runasadmin.net embarked on a journey to build his own online resume leveraging Azure infrastructure and source control. For a detailed, step-by-step guide, check out the full article: www.edtechirl.com/p/level-up-c... #k12cyber

Starting spring break with 110 open tickets in my queue… time to catch up while no one is here to break anything else! 😂

Always so proud to watch members of my team grow! There’s a tedious task our teachers have to do for sharing YouTube videos with students at schools where we block YouTube, and @runasadmin.net decided to make a Chrome extension to make the process easier! #k12cyber open.substack.com/pub/edtechir...

Supremely honored to take the stage as part of the panel for "The PowerSchool Cyber Incident: Paving the Path Forward" at the K12 Cybersecurity Leadership Conference last week! #k12cyber

I'm thinking about trying to find a second job that I can do on the side while I wait for Microsoft Admin dashboards to load... I could probably clock 10 hours a week 🤔

Do you have to refresh tons of Windows devices every summer? 1) Thoughts & Prayers 2) Check out this article from @runasadmin.net about how we plan to tackle it in a way that still leverages autopilot/intune, but fixes a lot of the associated pain points www.edtechirl.com/p/zero-touch... #k12cyber

Join @phintz.bsky.social and I for a conversation with Dr. Joe Phillips, CIO of Fulton County Schools! #k12cyber

Annoying fun fact... There are some AWS features that require that your S3 bucket name and domain name match exactly. Yet, you don't have to own a domain name to use the domain name for an S3 bucket. I didn't anticipate someone would be bucket squatting a domain I bought last week 🤔

This is what technology learning looks like in real time, and also why I love it so much. Learn -> Iterate -> Error -> Learn More -> Iterate -> New Error (if you're lucky) -> Repeat until success

This is a lengthy read, but one you NEED to make time for if you are involved with information security in K12. Great work from @markkeierleber.bsky.social #k12cyber

Well that should help 🤦‍♂️

Hot off the press... #k12cyber

Well, I guess I needed something new to lose sleep over... www.reddit.com/r/k12sysadmi... #k12cyber

Join me and @phintz.bsky.social and @sherylabshire.bsky.social for the latest episode of the @zerobreachzone.bsky.social podcast! This will hopefully be just the first of many conversations with Sheryl to come! #k12cyber #zbz #zerobreachzone

Join us for ep. 9 of the Zero Breach Zone for a talk with @sherylabshire.bsky.social, an extraordinary edtech leader & co-author of The Savvy Edtech Leader: Innovative Strategies to Boost Influence and Elevate Your Career. Available wherever you consume your podcasts! youtu.be/CzKwFxZntlA #k12cyber

Excited to present with @phintz.bsky.social tomorrow at the Illinois Learning Technology Center's SecurED virtual conference! There's still time to register at www.ltcillinois.org/securedschoo... #k12cyber

Eventful week! CISM on Wed. and CETL today. With these done, it's time for a break before tackling the Microsoft SC-200 and SC-100 this spring. Ironically. my lowest-scored domain was "Understanding the Educational Environment," a place I've spent the vast majority of my life. But yeh, fair 🤣

In the Knoxville area? Check out the Microsoft 365 Community Day coming up at the end of Feb. Looks great! It'll be at the Pellissippi State - Blount Country Campus. Workshops Day 1, Breakout Sessions Day 2. Ranging from $0-15. communitydays.org/event/2025-0...

Resources for Learning & Experience: Antisyphon Training - www.antisyphontraining.com TryHackMe - tryhackme.com HackTheBox - www.hackthebox.com Antiysyphon Cyber Range for Capture The Flags - www.antisyphontraining.com/cyber-range/

Starting to see some numbers on the breadth of the PowerSchool breach. My estimate was 50M... didn't think I'd be shooting so low. #k12cyber www.bleepingcomputer.com/news/securit...

Great read from K12 Dive about the PowerSchool breach. As a bonus, it also references the webinar with K12SIX that I was honored to be take part in. #k12cyber www.k12dive.com/news/powersc...

!!! What the hell?!

The only part that doesn’t sit well with me about the cyber pilot is that after rumors of being tied to erate discount %, the messaging was that the FCC wanted to reach a broad range of districts, not just high F/R lunch. The reason I received for not being funded? My F/R % was too low. #k12cyber

Lots of schools getting good news today as the FCC sent out approval notifications for the Cybersecurity Pilot grant to 645 schools and districts, 50 libraries, and 12 consortia, the vast majority of which were approved for full funding. Hopefully this is just the tip of the iceberg! #k12cyber

It's been a few days, but we still don't know much about the Scholastic breach. In the meantime, learn how you can be notified when users on your domain are identified in breach data sets https://buff.ly/40Cgp3n

What's this? Recording an episode of the Zero Breach Zone with everyone in the same room at the same time?! It was an absolute joy getting to chat with Dr. Sheryl Abshire at FETC. Release date TBD, but soon! #k12cyber @phintz.bsky.social @sherylabshire.bsky.social @edtechirl.com

This week on Zero Breach Zone: PowerSchool, FETC, and free resources from TCM Academy. Episode 8 is out now, wherever you consume your podcasts! #k12cyber youtube.com/shorts/TAn3R...

Join us tomorrow for a conversation about the PowerSchool breach and what comes next. Register at k12six: www.k12six.org/powerschool-... #k12cyber

When I left TN this morning, it was 17 degrees and I had to meet my ride to the airport a few hundred yards from my house because the driveway was impassable due to snow and ice. So getting off the plane to 66 degrees in Orlando was a VERY welcome surprise!

Another day, another K12 vendor breach... www.dailydot.com/debug/furry-... #k12cyber

If you haven't listened to Zero Breach Zone episode 7 yet, join us for a great convo about cybersecurity frameworks with Frankie Jackson! Available anywhere you consume your podcasts! #k12cyber

Join me at the 3rd annual K-12 Cybersecurity Leadership Conference in San Diego next month! Who else is going?? https://buff.ly/40meIXC

My initial take on the PowerSchool breach, including how to find out if you were impacted and what data fields were exported. https://buff.ly/3C0r0eR #k12cyber

Interested in seeing if you were involved in the PowerSchool compromise and what records were exfiled? This guide from Romy Backus will help you check your logs: docs.google.com/document/d/1... #k12cyber

Need something fun for a lunch and learn today? Check out this 1-hr Anatomy of M365 Business Email Compromise w/ Patterson Cake... there's also a 4-hr pay-what-you-can workshop for Investigating M365 BEC on Friday www.antisyphontraining.com/event/anti-c...

"The unauthorized party was able to use a compromised credential to access one of our community-focused customer support portals called PowerSource"..."Using this tool, the attacker exported the PowerSchool SIS 'Students' and 'Teachers' database tables to a CSV file, which was then stolen" #k12cyber

Well, maybe now PowerSchool will get more serious about MFA...

It's time to drop a new episode of the Zero Breach Zone! If you want to become a CCRE (Certified Cybersecurity Rubric Evaluator), listen for a free code (normally $99) shared by our guest Frankie Jackson! Listen now to learn more about the CCRE and the value of cyber frameworks in edu. #k12cyber

Well, that was a quick change of heart. I personally think the answer would have been to extend Windows 10 support till everyone's hardware caught up to the Windows 11 requirements, and THEN send Windows 10 to end of support, but 🤷‍♂️ It's welcome news for many schools, however. #k12cyber

🎧Zero Breach Zone episode 5 is out now, available wherever you consume your podcasts 🎧#k12cyber youtube.com/shorts/df6vV...