Bad news: Wayland School computers missing major Apple security patches - again!
WPS Computers Missing Major Apple Security Patches -- How to Check Your Mac
We are very disappointed to be posting another warning about the same problem. Computers used by Wayland students, teachers and WPS staff are missing a major set of Apple security updates that were released on 27 March -- two weeks ago. Security patches for ITunes that were released on 21 March and patches for Logic Pro and Garage Band that were released in February have also not been installed.
This is very poor IT management practice. The US CERT / Department of Homeland Security report shows that many of the Apple patches fix problems with scores greater than 9, on a scale from 1 to 10. These are major flaws that hackers are aware of and can easily exploit. (A copy of the US CERT / DHS report is attached.)
The vast collection of confidential data that WPS stores and accesses is at extreme risk -- including identity, physical / mental health and behavioral data linked to thousands of current and former Wayland students and their families. Wayland taxpayers also face significant potential liability; the cost of a breach could easily exceed $1 million according to industry studies, and Wayland has no insurance to cover a breach. Who would pay? You. The damage to Wayland families caused by theft and disclosure of confidential data could never be repaired, with any amount of money.
Attached is a copy of the letter that we wrote to the Wayland School Committee, asking them to take effective action and instruct WPS IT to install the patches immediately.
As noted previously, you should check your WPS Mac to see if the patches are missing -- and contact Leisha Simon, Director of WPS IT, if you Mac is affected. If your Wayland family is vulnerable, contact the School Committee and Board of Selectmen, and insist that they take immediate action.
How to check your Mac: Simply open the App Store and click the 'Updates' button at the top right. If any updates are available, they will be listed below. For example, here are the updates currently missing
Here are copies of the letter we sent to the School Committee and Board of Selectmen, and the US CERT / Department of Homeland Security report. Let me know if you have any questions: MarkAllenHays AT Gmail.com
MAPP public letter to Wayland School Committee - missing security patches - 4.11.2017.pdfUS CERT high priority patch summary - week of 4.3.2016.pdf
Tags for this Thread