From the AWS edition of October 30, 2026
Virginia Tech's Cyber Range launches AWS-supported CyberSafe AI curriculum and game teaching students AI security risks, from hallucinations to prompt injection
Virginia Tech (Virginia Cyber Range / U.S. Cyber Range); AWS; Commonwealth Cyber Initiative · K-12 and higher education (AI and cybersecurity education) · Virginia and other U.S. states
- Publisher
- Virginia Tech News
- Original publication
- 2026-10-29
- Source retrieved
- 2026-10-31
What happened
With AWS and Commonwealth Cyber Initiative support, the Virginia and U.S. Cyber Ranges offer CyberSafe AI: free instructional materials plus a browser game with six lessons and five levels. It covers hallucinations, data privacy, AI-enabled phishing, deepfakes, prompt injection and risks of autonomous agents. No Cyber Range affiliation is required. The ranges serve Virginia public high schools, community colleges and universities. Reach figures: 85,000+ users over a decade, 600,000+ virtual machines deployed, and nearly 400 schools, 31 states and nine countries per an AWS executive. The AWS collaboration is also developing AI tools for customer support, knowledge management and developer productivity.
Why it matters
Offers K-12 and community colleges a free, AWS-backed AI-security literacy resource. Cross-tagged to k12 because the Virginia Cyber Range serves public high schools.
Evidence and measured results
Institutional announcement with AWS and program-director quotes. Usage figures are cumulative platform figures for the Cyber Range, not CyberSafe AI. No learning-outcome data or evaluation of the curriculum is reported.
Limitations and uncertainty
Vendor-supported program announcement with no learning-outcome evaluation. Reach numbers mix the platform's whole history with this new initiative. The AI tools for support and knowledge management are mentioned without detail.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-10-30; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- Schools need accessible AI and cybersecurity literacy content but lack specialized equipment and staff.
- Stakeholders
- District CS/CTE coordinator
- Curriculum and instruction director
- Community college IT program chair
- District technology director
- Discovery questions
- Where would AI-security literacy fit in your current curriculum?
- Do teachers have prep time and training for new modules?
- What student-data rules apply to browser-based learning games?
- Value hypothesis
- Free, browser-based AI-security lessons could let schools start AI literacy quickly without new infrastructure.
- Potential engagement
- Support a classroom pilot with teacher onboarding and a simple pre/post assessment design.
- Unsupported claims
- Measured learning gains from CyberSafe AI
- Adoption counts specific to CyberSafe AI
- Efficacy of the AI support and knowledge tools mentioned
Pre-sales engineering
Role takeaway
- Fit
- Low-friction fit for schools with standard browsers and network access.
- Architecture and integration
- Web-delivered content hosted on AWS; no on-premises install. Requires allowlisting in content filters if needed.
- Prerequisites
- Student devices with supported browsers
- Network/filter allowances
- Privacy review of any account creation
- Constraints
- Connectivity-dependent
- No published data-handling details in the announcement
- Future adaptive features may change privacy posture
- Security
- Review data collected by the game and any third-party analytics against FERPA/COPPA.
- Proof of value
- Confirm access works on district devices and filters
- Verify what student data, if any, is collected
- Run a pre/post check on students' risk-recognition skills
Delivery
Role takeaway
- Work
- Select pilot courses, onboard teachers, run lessons and game levels, and assess student understanding.
- Dependencies
- Teacher availability
- Device and network readiness
- Curriculum approval
- Ownership
- District curriculum office, with the technology department supporting access.
- Skills and adoption
- Short teacher onboarding on AI-security concepts before classroom use.
- Governance checkpoints
- Privacy review before student use
- Curriculum alignment check
- End-of-pilot review
- Acceptance criteria
- Proposed: measurable improvement on a pre/post risk-recognition assessment
- Proposed: lessons completed in target courses within the term
- Proposed: no unresolved privacy issues
- Risks
- Teacher capacity limits uptake
- Content becoming outdated as AI threats evolve
- Unreviewed future data-collecting features
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
Browser-delivered on AWS cloud infrastructure, removing local installs. That suits schools with limited IT, but needs reliable connectivity and device access.
Governance
Who approves, reviews and stays accountable for outcomes?
The program says it emphasizes privacy, accuracy, guardrails and human oversight as it explores adaptive learning and assessment tools. Districts should review any future adaptive or AI-assessment features under student data policies.
Security and privacy
What data, permissions and controls need testing?
The curriculum teaches students to recognize prompt injection, deepfakes and data-privacy risks. Any student data collected by future adaptive tools would need FERPA/COPPA review.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
Free, browser-based, affiliation-free materials lower barriers for under-resourced schools and build early cyber/AI workforce skills.
Procurement
What should contracts, pricing and exit terms secure?
No cost to adopt the courseware. Districts may still need teacher training time and device/network capacity.
Operating model
Which teams own the service once it runs?
Teachers can integrate the lessons into existing CS or digital citizenship courses. The Cyber Range continues to update content.
Publication history
- 2026-10-30AWS · Issue 027 resources
Stable resource ID: virginia-tech-cyber-range-cybersafe-ai-aws-20261029