Re: TargetX vulnerability post

[Neal O'Farrell <neal () SCHOOLEDINSECURITY ORG>]

Hi Brian, I thought I'd introduce myself and a project that Educause might
find value in joining.

I'm heading up a unique security program that hopes to address three
security challenges at once:

- Encourage more high school students to consider security careers.

- Give college students in cybersecurity tracks some practical real-world
projects.

- Help our SMB community to get more engaged in their own defense.

We're working with a bunch of partners including the Cyber Readiness
Institute, the Global Cyber Alliance, the University of Cincinnati and a
network of high schools to have high school students interested in
cybersecurity partner with college students in cybersecurity, mentored by
industry experts and CISOs, to help shepherd SMBs through a comprehensive
cybersecurity program that's free.

I think there could be a great opportunity for colleges and their security
students and staff to get involved in their own local community, and give
back as they gain.

Would love to explain more if you have a moment.

Neal.

Neal O'Farrell
Schooled In Security
www.schooledinsecurity.org
neal () schooledinsecurity org
(925) 914 0248 (EST)

When we say "next generation security," we really mean it!


On Thu, Apr 4, 2019 at 3:30 PM Brian Kelly <bkelly () educause edu> wrote:

> All,
>
> Please see the post below that was published yesterday by a 17-year-old
> “security researcher”.
>
> Institutions using TargetX for admissions CRM will want to read\review.
>
> https://d4stiny.github.io/Hacking-College-Admissions/
> <https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fd4stiny.github.io%2FHacking-College-Admissions%2F&data=02%7C01%7C%7C09e9958d1ead4ea33f7e08d6b932b30a%7Cdd4b037fe626495db0170cc0f7dddb37%7C0%7C0%7C636900024742508437&sdata=zlDUELCQzG%2BTabHdmn2GKNfWmUSRuW5JaqvOugnkwuA%3D&reserved=0>
>
> Hacking College Admissions
> <https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fd4stiny.github.io%2FHacking-College-Admissions%2F&data=02%7C01%7C%7C09e9958d1ead4ea33f7e08d6b932b30a%7Cdd4b037fe626495db0170cc0f7dddb37%7C0%7C0%7C636900024742518446&sdata=FF6V0f9L6Cb%2BiBSLhKA8BSjr%2B7Ki5rwYrruSYaMr4nE%3D&reserved=0>
>
> d4stiny.github.io
>
> Getting into college is one of the more stressful time of a high school
> student’s life. Since the admissions process can be quite subjective,
> students have to consider a variety of factors to convince the admissions
> officers that “they’re the one”. Some families do as much as they can to
> improve their chances - even going as far as trying to cheat the system.
> For wealthier families, this might be donating a very large amount to the
> school or as we’ve heard in the news recently, bribing school officials.
>
> Brian
>
>
>
>
>
> Brian Kelly
>
> Director, Cybersecurity Program
>
> *EDUCAUSE*
> *Uncommon Thinking for the Common Good*
>
> Follow HEISC on LinkedIn
> <https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fshowcase%2Fhigher-education-information-security-council-heisc-%2F&data=02%7C01%7C%7C09e9958d1ead4ea33f7e08d6b932b30a%7Cdd4b037fe626495db0170cc0f7dddb37%7C0%7C0%7C636900024742518446&sdata=1HwMGt1YEx0mQQvlhoZfMDOp7esJdAtHgIr3FiTjsS0%3D&reserved=0>
> | Twitter: @HEISCouncil | bkelly () educause edu
>
>
> direct: 720.406.6757 | mobile 475.449.6440 | educause.edu
> <https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2F&data=02%7C01%7C%7C09e9958d1ead4ea33f7e08d6b932b30a%7Cdd4b037fe626495db0170cc0f7dddb37%7C0%7C0%7C636900024742528451&sdata=jTDv%2FMuRF5tLj4nHRD2Woe6FJOTFWHMbjAhGVtPk5w4%3D&reserved=0>
>
> 1150 18th Street, NW, Suite 900 Washington, DC 20036