AI war games for schools
The Cyber Badger 2026 exercise highlighted how AI can automate phishing, crack weak authentication, and help attackers pivot into critical infrastructure — with education repeatedly flagged as vulnerable. Simulations and analyses warn that institutions with limited cyber resources are particularly at risk, underscoring the need for drills and fast incident escalation. (cdis.wisc.edu) (digitaljournal.com)
Cyber Badger is a multi‑partner tabletop series run by UW–Madison’s School of Computer, Data & Information Sciences that has previously involved CISA, the FBI, the Wisconsin National Guard’s 176th Cyber Protection Team, and energy‑sector partners in hands‑on incident simulations. (cdis.wisc.edu) Independent industry testing cited alongside the exercise shows AI‑generated phishing can match human‑crafted attacks in success rates, with one study reporting about 60% success in controlled tests of AI‑automated phishing. (hbr.org) Federal K‑12 guidance now prioritizes a short list of high‑impact protections — deploy multifactor authentication, patch known exploited vulnerabilities, test backups, and regularly exercise an incident response plan — with CISA offering a dedicated reporting line at report@cisa.gov and 1‑844‑SAY‑CISA for rapid escalation. (cisa.gov) A recent RAND survey found roughly 60% of K‑12 principals reported at least one cybersecurity incident across the 2023–2025 school years, underscoring the sector’s incident frequency observed in the UW exercise series. (rand.org) Threat‑lab telemetry cited by education trade reporting recorded a 224% rise in attacks on the education sector in 2024, a trend mirrored in Cyber Badger scenarios that stressed cross‑system pivots toward utilities and critical services. (eschoolnews.com) Exercise analysis and security guidance emphasize phishing‑resistant authentication (hardware security keys/FIDO2), network segmentation to limit lateral movement, and scripted escalation playbooks to shrink detection‑to‑reporting windows — measures CISA and incident‑response practitioners list as first priorities for under‑resourced organizations. (tropicosecurity.com)
