Abstract
LMS platforms are attractive targets for cybercriminals because of the large amount of sensitive data (particularly personal data of students, faculty, test scores, and financial information). The threat model consists of the main current cyber threats to LMS platforms, in particular: phishing attacks, credential stuffing, data privacy attacks, SQL injection and other web-based attacks, DDoS attacks, exploitation of vulnerabilities in third-party plugins and extensions, ransomware, unauthorized access and API attacks, exploitation of vulnerabilities in non-updated software, and insider threats. Creating a model is an important part of security system development, which will allow more accurate selection of defence mechanisms and procedures. In addition, the paper presents recommendations for ensuring LMS cybersecurity in the context of the realization of different types of threats.