Story perspectives

Critical Security Flaws Threaten Thousands; Updates Urged!

11/6/2025

Summary

Cybersecurity Alerts Issued

Cybersecurity and Infrastructure Security Agency (CISA) warns of a CentOS Web Panel flaw enabling unauthenticated command execution in versions before 0.9.8.1204; agencies must update or cease use by November 25.
AMD addresses a Zen 5 CPU bug that could compromise cryptographic security; patches are due by January.
The Post SMTP WordPress plug-in vulnerability affects over 400,000 sites and allows attackers to reset passwords, and users are urged to update.

Summary

Virginia Schools Targeted

Virginia schools are experiencing a surge in cyber attacks, reporting thousands of attempts daily.
David Childress, CTO of Louisa County Public Schools, said most attempts fail, but the threat remains.
A PowerSchool breach compromised student data, raising concerns about cybersecurity.
Christopher Cruz of the Virginia Fusion Center said education is a top cyber target, citing financial motives.
Conference attendees discussed collaboration among school divisions to strengthen defenses.

History

Historical Context

The Cybersecurity Act of 2015 built on earlier efforts, such as the 2003 National Strategy to Secure Cyberspace, which aimed to enhance collaboration between the government and private sector. With educational institutions facing thousands of cyber attacks daily, this act established a framework for sharing cyber threat information, addressing vulnerabilities highlighted by incidents like the PowerSchool breach and emphasizing the need for robust cybersecurity measures.

1 of 3

Cybersecurity Alerts Issued

Cybersecurity and Infrastructure Security Agency (CISA) warns of a CentOS Web Panel flaw enabling unauthenticated command execution in versions before 0.9.8.1204; agencies must update or cease use by November 25.
AMD addresses a Zen 5 CPU bug that could compromise cryptographic security; patches are due by January.
The Post SMTP WordPress plug-in vulnerability affects over 400,000 sites and allows attackers to reset passwords, and users are urged to update.

1 / 3