Educational institutions continue to be among the most targeted sectors by cybercriminals, facing an evolving mix of ransomware, credential theft, phishing, and malware campaigns. But beyond the headlines, what do real-world compromises reveal about how attackers operate?

Drawing on original research from the Lumu Threat Observatory, this session presents exclusive findings on the threats actively targeting K–12 schools, colleges, and universities. Attendees will gain insight into the most prevalent attack techniques, emerging adversary trends, malware activity, and indicators of compromise observed across educational environments.

Beyond presenting the data, the session translates these findings into practical guidance for security leaders, helping them prioritize defenses, improve detection, and strengthen cyber resilience based on observed attacker behavior rather than assumptions or industry anecdotes.