Attacks through internet-connected devices have spiked in the education sector, but attack volume is declining, according to a new report.