The numbers that emerge from the analysis are striking. Half of the reviewed studies — 50.0 percent — characterise cybersecurity incidents as producing high-magnitude pedagogical disruption, while only a single study classifies the impact as low. Teaching presence, one of the three pillars of the well-known Community of Inquiry framework for online learning, was the most frequently affected dimension, appearing in 62.5 percent of coded studies. By contrast, only 16.7 percent of studies explicitly examined differential equity impacts, and a mere 12.5 percent addressed cybersecurity risks tied to artificial intelligence and learning analytics, despite the rapid adoption of AI-enabled educational technologies. For the review’s author, Abdullah F. Alenezi of the Public Authority for Applied Education and Training in Kuwait, this imbalance is the field’s central blind spot, particularly given that many of the world’s most cybersecurity-vulnerable universities sit in low- and middle-income contexts.

The theoretical backbone of the review is the Community of Inquiry framework, originally proposed by Garrison, Anderson, and Archer, which conceptualises successful online learning as the interplay of teaching presence, social presence, and cognitive presence. Read through this lens, the cybersecurity incidents reported across the literature map neatly onto distinct forms of educational harm. Ransomware attacks and cloud-service outages interrupt course delivery and sever instructor–student interaction, eroding teaching presence. Data breaches and phishing campaigns undermine the trust that online learning communities depend upon, weakening social presence. Persistent technical instability fragments the sustained, collaborative inquiry that constitutes cognitive presence. The review is careful to note that these are associations reported across studies rather than demonstrated causal relationships, but the consistency of the pattern across 24 studies spanning 14 geographical contexts — from Morocco and Moldova to Indonesia, Ghana, Ecuador, and China — lends the synthesis considerable weight.

Student engagement theory adds a second interpretive layer. Drawing on Fredricks, Blumenfeld, and Paris’s multidimensional model of behavioural, emotional, and cognitive engagement, the review suggests that cybersecurity incidents are associated with reduced participation, diminished confidence in institutional digital systems, and interruptions to sustained learning activities. In practical terms, a student whose university suffers a data breach may become reluctant to submit work through institutional platforms, share ideas in online forums, or trust that assessments are secure. That psychological dimension, the review argues, is routinely missing from institutional risk assessments, which tend to count compromised endpoints and downtime hours rather than lost learning.

Why focus on developing and emerging economies? The review’s answer is structural. Higher education institutions in World Bank low-, lower-middle-, and upper-middle-income contexts frequently contend with resource constraints, legacy digital infrastructure, shortages of cybersecurity expertise, and widespread reliance on bring-your-own-device learning environments in which students connect through personal laptops and phones of wildly varying security quality. At the same time, these institutions are adopting cloud-based and AI-supported educational technologies at a rapid pace, often without equivalent investment in cybersecurity governance. UNESCO and OECD reports cited in the study highlight persistent inequalities in digital infrastructure and institutional capacity across these settings. The result, the review suggests, is a double burden: greater vulnerability to incidents, and slower, more painful recovery when incidents occur, with consequences that fall hardest on students who depend on shared devices, mobile connectivity, or limited institutional support.

The methodological machinery behind these conclusions is unusually rigorous for a scoping review. Following the Arksey and O’Malley framework as refined by Tricco and colleagues, and reported under PRISMA-ScR guidelines, the review searched Scopus, Web of Science, ERIC, and Google Scholar from January 2014 to March 2025, then ran an updated targeted search covering 2024–2025 to capture the fast-moving post-generative-AI literature. From 175 initial records, screening and backward reference-list searching yielded a final evidence base of 24 studies. Each was coded against a ten-variable framework covering primary threat type, pedagogical impact level, disrupted Community of Inquiry dimension, equity considerations, AI and analytics risk, mitigation strategy, study design, evidence quality, country income classification, and Sustainable Development Goal alignment. An independent second coder assessed a 25 percent subsample, achieving mean inter-rater agreement of Cohen’s kappa = 0.81 — a level conventionally regarded as substantial. Methodological quality was appraised using Critical Appraisal Skills Programme checklists, though, consistent with scoping review convention, quality ratings described rather than filtered the evidence.

The temporal analysis reveals a field that has not evolved in a straight line. The proportion of empirical studies was 40.0 percent in 2014–2019, fell to 28.6 percent during the pandemic-dominated 2020–2022 period, and rose to 58.3 percent in 2023–2025. Early work framed cybersecurity largely as a technical and governance challenge; the COVID-19 years shifted attention to keeping systems running during emergency remote teaching; and the most recent literature increasingly treats cybersecurity as a matter of educational resilience, learner engagement, digital equity, and AI governance. This non-monotonic trajectory, the review argues, reflects changing research priorities rather than steady accumulation of evidence — and it means the field still offers only a partial picture of how cybersecurity resilience actually shapes educational outcomes.

On the question of what works, the review delivers a sobering verdict. Technical governance frameworks such as ISO/IEC 27001 and the NIST Cybersecurity Framework are the most frequently recommended approaches, but their implementation is not consistently associated with lower reported pedagogical disruption in the coded evidence. Institutional theory offers one explanation: organisations may adopt such frameworks to satisfy regulatory or legitimacy expectations without embedding them in daily practice, especially where capacity is limited. By contrast, the strongest empirical evidence in the review — the only study to receive a High CASP rating — concerned contextual, simulation-based phishing training, which was associated with meaningful reductions in user susceptibility. Zero-trust architecture, one of the most promising emerging technical approaches, has been shown feasible in resource-constrained institutions through case-study evidence, but no reviewed study evaluated whether improved technical security actually translates into better pedagogical continuity or student engagement. The gap between what institutions deploy and what educators experience remains, in effect, unmeasured.

To organise these patterns, the review introduces the Cybersecurity–Pedagogy Resilience Framework, a five-dimension conceptual model grounded in Community of Inquiry theory, digital transformation theory, and institutional theory. Its dimensions — Technical Infrastructure, Pedagogical Integration, Human Capability, Governance and Policy, and Equity and Access — are operationalised through five testable propositions, labelled H1 through H5, linking cybersecurity maturity to measurable learning outcomes. The framework is explicitly presented as hypothesis-generating rather than validated: a diagnostic tool that universities can use for self-assessment, and a research agenda for future empirical work. An institution strong on technical infrastructure but weak on equity, for example, might prioritise bring-your-own-device security support and differential monitoring of learner disruption, while one with mature governance but weak human capability might invest in simulation-based cybersecurity education for staff and students.

The review’s broader message is a reframing. Cybersecurity, it argues, should be repositioned as a strategic educational responsibility, integrated within quality assurance, teaching, and learning governance rather than confined to information technology departments. Student digital safety belongs within student wellbeing and educational quality frameworks. And the field’s evidence gaps — longitudinal studies of infrastructure maturity and learning-platform continuity, mixed-methods work on security-by-design in digital pedagogy, experimental evaluations of training durability, comparative studies of governance integration, and equity-focused research on differential student impact — define a concrete agenda. With direct relevance to Sustainable Development Goal 4 on quality education and Goal 10 on reduced inequalities, the review makes the case that in an era when universities run on cloud platforms, learning analytics, and AI, the security of the digital classroom is inseparable from the quality of the education it delivers. Protecting that classroom, the evidence suggests, is no longer just an IT problem. It is an educational one.

Subject of Research: Cybersecurity resilience and digital learning continuity in higher education in developing and emerging economies

Article Title: Cybersecurity as a determinant of digital learning resilience in higher education a scoping review and content analysis of developing and emerging economies

Article References: Alenezi, A. F. (2026). Cybersecurity as a determinant of digital learning resilience in higher education a scoping review and content analysis of developing and emerging economies. Discover Education, 5(1), Article 1043. https://doi.org/10.1007/s44217-026-02217-y

Image Credits: AI Generated

DOI: 10.1007/s44217-026-02217-y

Keywords: cybersecurity, higher education, digital learning, educational equity, ransomware, Community of Inquiry, student engagement, developing economies, learning management systems, AI in education, scoping review, digital resilience

The paper, authored by a large multidisciplinary team led by Feras A. Batarseh of Virginia Tech together with researchers from Iowa State University, Washington State University, the University of California Davis, and several other institutions, is the product of a workshop series that brought together more than 150 stakeholders from academia, industry, government, and farming communities. Its central claim is stark: cyberattacks across the agrifood sector are escalating, while the sector’s defenses remain fragmented, underfunded, and poorly adapted to the realities of agricultural technology. The FBI’s Internet Crime Report for 2024 documents the broader surge in cybercrime, and sector-specific reviews of food and agriculture incidents describe a steady accumulation of ransomware attacks, data breaches, and intrusions into farm and food-processing networks. The Food and Agriculture Information Sharing and Analysis Center’s assessment of the 2025 ransomware landscape suggests the trend is not abating heading into 2026.

What makes agriculture uniquely vulnerable is the sheer heterogeneity of its digital footprint. A modern smart farm may combine legacy industrial control systems in grain handling with consumer-grade Internet of Things sensors in fields, precision agriculture equipment running proprietary firmware, and cloud analytics platforms aggregating data across thousands of operations. Survey literature on smart farming documents how IoT devices, big data platforms, and Agriculture 4.0 technologies have multiplied the attack surface faster than security practices have evolved. Researchers have demonstrated attack scenarios against smart farming infrastructure, including denial-of-service attacks against connected equipment and side-channel attacks against digital agriculture systems. Security analyses of cyber-physical systems in agricultural settings, and even deliberately vulnerable sensor frameworks built for research purposes, illustrate how thin the defensive margin often is. Unlike a bank or a hospital, a farm typically has no security operations staff, no intrusion detection capability, and often no awareness that its irrigation controller or tractor telematics unit could be a target at all.

The consequences of a successful attack extend well beyond a single operation. The food supply chain is a tightly coupled network in which disruption at one node, a grain elevator, a meatpacking plant, a cold-chain logistics provider, propagates rapidly downstream. Systematic reviews of cybersecurity vulnerabilities in the food supply chain link potential intrusions directly to food security outcomes, and the US Cybersecurity and Infrastructure Security Agency has issued both a food and agriculture cybersecurity checklist and earlier alerts on threats to precision agriculture. Ransomware attacks on food processors have already forced production halts in recent years, and the sector’s dependence on just-in-time logistics means that even short outages can cascade. The Nature Food authors argue that the sector’s cyber resilience must be treated with the same seriousness as biosecurity, food safety, and weather risk, none of which farmers would dream of ignoring.

Policy momentum is beginning to build. The Farm and Food Cybersecurity Act of 2025 and the Cybersecurity in Agriculture Act of 2025, both introduced in the 119th Congress, signal federal recognition of the problem, and the National Institute of Standards and Technology’s Cybersecurity Framework 2.0 provides a general template that the sector has yet to systematically adopt. But the authors contend that legislation and voluntary frameworks alone will not close the gap. What is needed, they argue, is institutional infrastructure: a permanent, nationally coordinated Agricultural Cybersecurity Consortium led by regional land-grant universities, the institutions created by the Morrill Act of 1862 with a mandate for agricultural research, education, and extension, and with deep expertise in artificial intelligence and cybersecurity. Land-grant universities, the paper notes, are uniquely positioned because they already maintain trust relationships with farmers, extension networks in every state, and the technical faculty needed to build defenses.

The consortium roadmap is concrete. First, it calls for redoubled research, education, and workforce development in agriculture cybersecurity, including curricula designed specifically for the food and agriculture sector, building on emerging efforts such as university cybersecurity initiatives aimed at protecting farmers and rural businesses. Second, it proposes the creation of agrifood security testbeds: experimental platforms where researchers can safely replicate farm networks, connected agricultural vehicles, and food-processing control systems, and then attack them. Testbeds of this kind, including prototypes for agricultural vehicles and environments described in recent preprints, allow defensive tools to be evaluated against realistic threats before deployment, in the same way that aviation and power-grid security research relies on simulated environments. Honeypots and deliberately vulnerable systems can be embedded in these testbeds to study attacker behavior directly.

Third, the roadmap emphasizes artificial-intelligence-driven threat mitigation. Machine-learning approaches to intrusion detection for Agriculture 4.0, including deep learning models trained to recognize distributed denial-of-service attacks, have shown promise in the research literature, and the authors argue these tools should be operationalized for anomaly detection across farm and food networks, automated intrusion response, and secure assembly of agricultural equipment and software components. Formal methods from program analysis, such as graph-reachability techniques, and fault-tolerant distributed transaction systems, including blockchain-based architectures with established security reference models, could harden the data pipelines that carry everything from sensor readings to supply chain provenance records. Distributed ledger technology has already demonstrated its value in food supply chain transparency at scale, as in the well-documented Walmart case study using Hyperledger Fabric, and the authors see ontologies and semantic models, including conceptual modeling work aimed at agrifood cybersecurity ontologies, as a way to make threat intelligence machine-readable and shareable across the sector.

The fourth pillar is perhaps the most operationally significant: establishing an Agriculture Security Operations Center, a sector-wide monitoring and response capability analogous to the operations centers that protect power grids and financial networks. Such a center would aggregate threat intelligence, coordinate incident response across states and commodities, and provide the continuous situational awareness that individual farms and small food businesses cannot maintain on their own. The economics literature on information security investment, notably the classic Gordon-Loeb model, suggests that organizations systematically underinvest in security relative to expected losses, a pattern the agrifood sector exemplifies. A shared operations center spreads the cost of sophisticated monitoring across the sector, making defense economically rational for even the smallest producers. Finally, the roadmap stresses collaboration with non-university stakeholders, including equipment manufacturers, food companies, insurers, and government agencies, so that defenses reflect the actual structure of the food system rather than an academic abstraction.

The authors are careful to frame the problem as one of resiliency as much as prevention. In cyber-physical systems, perfect security is unattainable; the realistic goal is the ability to detect intrusions quickly, degrade gracefully, and recover operations without lasting harm. Resilience frameworks for cyber-physical systems, developed in the security engineering literature, provide the technical vocabulary, and the agrifood sector needs its own tailored version. There are also subtler threats to contend with: insider threats and opportunistic attacks that exploit trust relationships, and the spread of misinformation through social and online media, which systematic reviews identify as a distinct agri-food risk that can destabilize markets and consumer confidence without touching a single sensor. Generative AI adds a new dimension, with researchers warning about GPT-based malware and AI-accelerated phishing that could target rural operators with unprecedented sophistication.

What makes this Perspective resonate beyond the technical community is the stakes. Food is the one infrastructure sector where failure is felt three times a day by every person in the country. The authors’ warning is not that hackers will poison the food supply through a keyboard, but that a well-timed attack on logistics, processing, or farm equipment during a harvest window or a drought year could inflict economic and social damage on a scale the sector has never planned for. Their prescription, a consortium anchored in land-grant universities, testbeds that treat farm networks as attackable systems, AI-powered detection, a national security operations center, and a workforce trained to defend the digital farm, amounts to a proposal to give agriculture the cyber defenses that every other critical sector already takes for granted. Whether policymakers act before a landmark incident, rather than after, may determine how the story is told.

Subject of Research: Cybersecurity and resiliency of digitalized agricultural and food systems

Article Title: Cybersecurity and resiliency in agricultural and food systems

Article References: Batarseh, F. A., Govindarasu, M., Hasan, M., Hull, R., Jacobson, D., Khot, L. R., Levitt, K., Reecy, J., Sadoghi, M., Bishop, M., Goins, G., Gebremedhin, A., Kalyanaraman, A., Mallapragada, S., Sarrafzadeh, A., Xia, K., & Lange, M. C. (2026). Cybersecurity and resiliency in agricultural and food systems. Nature Food. https://doi.org/10.1038/s43016-026-01422-0

Image Credits: AI Generated

DOI: 10.1038/s43016-026-01422-0

Keywords: agriculture, cybersecurity, food systems, critical infrastructure, precision agriculture, ransomware, artificial intelligence, intrusion detection, land-grant universities, testbeds, supply chain, food security