June 23, 2026
Fired IT worker jailed for 21 months after sabotaging old school district
A fired school district IT admin spent 20 months attacking his former employer.

By Stanislav Klevtsov
1 min read
Before being terminated, he grabbed over 300 sets of user credentials.
Then, over the next two years, he deleted their Facebook page, wiped Apple School Manager data, disrupted their Schoology LMS, and tried resetting GoDaddy accounts.
He got caught because he asked a coworker to wipe a USB drive he left behind. The coworker gave it to management instead.
$100K in damages, 21 months in prison.
The lesson? Just credentials, nobody revoked on the day he was fired. For twenty months.๐
Also this week
โ 1,500 Arch Linux AUR packages poisoned with infostealers via spoofed maintainer accounts.
โ Google Threat Intelligence Group found a Chinese actor inside US military research networks who resided there for over 1 year.
Top CVEs last week
- Ivanti Sentry (CVE-2026โ10520) unauth RCE
- Ivanti Sentry (CVE-2026โ10523) auth bypass
- NGINX two critical RCEs
- Cisco ISE (CVE-2026โ20181/20190) RCE, Info disclosure
- Fortinet FortiSandbox (CVE-2026โ25089) OS command injection
- Atlassian Jira Server (CVE-2026โ43512) auth bypass
- LiteLLM (CVE-2026โ42271) command injection
- OpenClaw (CVE-2026โ53838) race condition sandbox escape
Share your thoughts on the IT admin story.
I mean, did they even have an onboarding/off-boarding policy? ๐ค
Follow me
Want to receive weekly stories and updates on cybersecurity?
Join my Telegram channel and LinkedIn.