New school year brings fresh cyber safety reminders for Ontario students and families

Cybersecurity experts are stressing the importance of student cyber safety as tens of thousands of Ontario kids return to the classroom with devices and laptops in hand.

With the rise of generative AI, cloud-based services, social media, and increasingly sophisticated online threats, they warn that protecting kids online requires an all-hands-on-deck approach involving parents, students, teachers, and school boards.

"Technology is now well-integrated within classrooms. Teachers use it, school boards use it, schools use it, and of course, students are using it. That creates a large attack surface for cyberattackers who want access to information," said Charles Finlay, executive director of the Rogers Cybersecurity Catalyst at Toronto Metropolitan University.

"The risks are growing. There's no need to panic, but it's important to understand the seriousness of the problem. There are effective ways to protect students and for students to protect themselves."

Finlay says AI tools have made it easier for criminals to craft convincing malicious emails and text messages, and create fake images and videos. The widespread use of social media apps and video game chat rooms has also made it easier for strangers to come into contact with children.

"It's important that we emphasize that they should not be exchanging information, photos, or videos with people that they don't know in real life," Finlay said. "There are others that are also important: using strong passwords and using new passwords on a fairly regular basis, (and) being very, very careful before clicking on links in emails or text messages."

Other cyber hygiene tips include using non-SMS two-factor authentication, using different passwords for different accounts (with the help of a trusted password manager), and ensuring devices are always up-to-date.

Parents should also ensure the privacy settings on their child's apps and devices, and other devices in the home, are secure, and set device boundaries and monitor their usage.

Claudiu Popa, co-founder of the KnowledgeFlow Cybersafety Foundation, said the shift to cloud technology, accelerated during the pandemic, has left many schools exposed.

"The threats of just being online for many students include victimization, cyberbullying and privacy breaches," said Popa. "Kids are using laptops and phones every day, and those devices are like unlocked doors if they're not protected."

A longtime cybersecurity educator, Popa said today's students are digital natives, learning in an education system that is more reliant on technology than ever before.

Because of that, it's incumbent on schools and school boards to understand the changing technological landscape and teach students accordingly.

Popa echoed Finlay's suggestions, including strong, unique passwords, and teaching kids to be wary of suspicious emails and text messages with urgent demands, or that claim to come from a teacher or authority figure. However, he notes that it isn't just students who should be mindful of sharing personal information online.

Parental oversharing is also an issue, including back-to-school photos posted to social media, which may reveal a child's location, school, and schedule.

It's also a chance for parents and schools to inform students of their right to privacy and their right to preserve their personal information on the devices they use.

"This is why we tell students to think before you post, avoid sharing back-to-school photos with school names or bus stops or uniforms, because it allows people with perhaps the wrong intentions to profile you."

At the end of the day, cyber safety and prevention is a team effort, meaning students need to feel comfortable coming forward with concerns.

"Encourage kids to tell you right away if they see something suspicious. I also tell this to their teachers. Fear of getting in trouble is often what scammers count on," Popa said.