The education sector is commonly targeted by cyber threats due to the valuable data it holds and the often-underfunded security measures. Some of the most common vulnerabilities include outdated software, unpatched operating systems, and weak access controls. Educational institutions tend to use a variety of legacy systems, which may lack support for the latest security patches. Phishing attacks targeting staff and students are also widespread, as users may be unaware of security risks. Additionally, unsecured network configurations, particularly for Wi-Fi, and weak passwords make it easier for attackers to gain unauthorized access. Insufficient cybersecurity awareness and training among staff and students further expose the education sector to potential vulnerabilities.