CarahCast: Podcasts on Technology in the Public Sector · Carahsoft

Vercara Defends Higher Ed from Network Attacks

·36 min·2 clips

Average DDoS attacks last about 15 minutes, while ransomware can sit in a network for months or years.

1. CarahCast: Podcasts on Technology in the Public Sector centers on Vercara Defends Higher Ed from Network Attacks and the threat patterns facing education. 2. Anthony Jimenez hosts Rob Ayoub, product marketing manager at DigiCert, and Richard Wallace, senior cyber threat analyst at DigiCert, both of whom explain how secure DNS and DDoS protection fit into resilience. 3. The episode asks what higher education should do when DDoS, ransomware, phishing, and data theft all target the same campus network. 4. Richard Wallace says education is lucrative because student registration data, PII, research, and intellectual property are all housed there. 5. He also says cybercriminals, advanced persistent threats, and state actors all see value in that information. 6. Rob Ayoub describes the modern campus attack surface as a large population of connected devices that universities do not manage directly. 7. He points to laptops, phones, smart speakers, Roku devices, PlayStations, Xboxes, and Switch consoles as common student-owned endpoints. 8. Richard Wallace adds that dorm IoT devices such as smart lights and smart vacuums can become ingestion points because they are built for convenience. 9. The conversation defines DDoS as many infected machines sending bad traffic at once to overwhelm services. 10. Richard Wallace says their internal platform shows confirmed DDoS activity rising around registration, fall midterms, fall finals, spring midterms, and finals. 11. He notes that a student in a fully online bachelor's program can fail a class if testing systems become unavailable. 12. Rob Ayoub says DDoS attribution is difficult, but he cites a Texas case where a student allegedly tried to disrupt testing. 13. Richard Wallace says hacktivist platforms sometimes rent attack time for as low as $20 and that DDoS tools are easy to obtain. 14. He contrasts that with ransomware, which requires deeper network penetration and can remain hidden for months or years. 15. Richard Wallace says ransomware attackers often steal data first, then lock systems and demand Bitcoin or threaten a leak site. 16. He says the average ransomware demand in education is about half a million dollars and that some organizations still pay because downtime and fines can cost more. 17. The tone is technical and explanatory, with both speakers repeatedly translating cyber terms into plain language. 18. The format is an interview with back-and-forth prompts, examples, and practical mitigation advice. 19. Higher-ed IT teams, district leaders, and public-sector security staff will get the most value. 20. Listeners focused on campus life rather than cyber defense may skip it.

As heard by us

A practical higher-ed security briefing centered on resilience, ransomware, and DDoS risk.

Higher education sits at the center of the discussion, with the focus on how institutions build resilience before an incident arrives. The episode starts with secure DNS and DDoS protection, then moves through education-sector attack trends: ransomware, other cyber threats,…

Read the full review in PlayNext →

Why you'd press play

See how higher-ed attackers turn downtime into leverage.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CarahCast: Podcasts on Technology in the Public Sector