With education the most-attacked sector worldwide and the DPDP Act holding institutions liable for student data, campuses need audited vendor contracts, real policies and student red teams, not paper compliance. Cybersecurity threats in universities are increasing in both frequency and sophistication. Attackers target institutions for various reasons, such as stealing valuable research, holding data.