Overview
- Practitioners say generative and agentic AI now enable faster, highly tailored phishing that mimics leaders’ tone and timing and evades traditional red-flag training.
- Schools are especially vulnerable because of public staff information, a culture of openness, decentralized IT environments, high turnover, and limited cybersecurity resources.
- Districts report growing risks from deepfake audio and video that can convincingly spoof superintendents or finance chiefs using widely available recordings.
- Experts emphasize practical defenses such as multifactor authentication everywhere, hardware security keys, out-of-band verification, human-only trust signals, and layered detection and response.
- Defensive use of generative AI remains tentative and mixed as some tests yield misleading outputs, vendors blur claims about ‘AI’ features, and 51 percent of educators expect attacks to worsen over the next year.