Keeper Security warns schools of AI phishing and unmanaged machine identities

By Atlas Watchline Staff · News · August 13, 2026

Keeper Security said education IT teams face higher cyber risk at the start of the school year because of AI-enabled phishing, deepfake impersonation and unmanaged machine identities.

Keeper Security said education IT teams should treat the start of the school year as a high-risk period for cyberattacks, warning that AI-enabled phishing, deepfake impersonation and unmanaged machine identities can widen exposure as campuses add new users and devices.

The company said the education sector remains a frequent target for ransomware, credential theft and data breaches because schools and universities hold student records, financial information and research while often relying on underfunded IT departments and a rotating user base. Keeper said the back-to-school rush can bring bulk account creation, mass device enrollment and third-party app onboarding, which can create openings if credentials and access controls are not tightened first.

Keeper said only 14% of schools mandate security awareness training and that nearly one in five students and parents reuse the same passwords across personal and school accounts. The company also said 52% of education leaders identify deepfake impersonation as a top concern, 26% feel confident recognizing AI-enabled threats and 41% of institutions report being targeted by AI-generated phishing attempts or misinformation campaigns.

The release said phishing emails can mimic financial aid offices, IT helpdesks or university leadership, while deepfake voice and video attacks can make fraudulent messages seem more convincing. Keeper also focused on non-human identities in education technology, including service accounts, API tokens, machine certificates, AI agents and automated bots, which it said are widespread and largely unmanaged.

Keeper Chief Executive and Co-founder Darren Guccione said the “real blind spot” is the ecosystem of machine identities powering modern EdTech. He said back-to-school is the right time for education IT teams to take stock of every identity on the network, human and non-human alike.

Keeper recommended enforcing multifactor authentication, auditing privileged access and removing stale credentials before new users arrive. It said its platform can discover, govern and automatically rotate credentials tied to human and non-human identities, and said KeeperPAM provides privileged access controls, session recording and audit trails intended to help meet FERPA and CIPA requirements.

The release was dated Aug. 13, 2026, and datelined Chicago. Keeper Security described itself as a zero-trust, zero-knowledge identity security provider.

Sources

• PR Newswire release: Keeper Security issues cybersecurity guidance for education IT teams as students return to campus

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.