Email remains the #1 attack vector against K–12 schools—and the threats are no longer obvious.

From basic spam to sophisticated business email compromise and zero-day exploits, today’s attackers are targeting schools with tactics that easily bypass native email filters and exploit human trust. In this session, we’ll break down the 13 most common (and most dangerous) email threats facing K–12 districts right now, including emerging risks like quishing, conversation hijacking, lateral phishing, and account takeover—many of which traditional tools fail to detect.

But identifying threats is only half the battle. You’ll also learn how districts can proactively protect themselves using layered security strategies, behavioral detection, and targeted investigations across Google Workspace and Microsoft 365. We’ll walk through real-world security and safety audits that uncover risky emails, compromised accounts, unsafe file sharing, third-party app exposure, and suspicious login behavior—before they escalate into incidents.

Attendees will walk away with:

• A clear understanding of modern email threats targeting K–12 schools
• Why native email filters are no longer enough
• Practical audit and investigation strategies IT teams can apply immediately
• Insight into how automation and AI-driven detection reduce risk without adding workload

If you’re responsible for protecting student data, staff accounts, and district operations—and want a clearer, more proactive approach to email security—this session is a must-attend.