Explore

Trendline Trendline
SailPoint Discloses GitHub Repository Hack Affecting Security Protocols

SailPoint Discloses GitHub Repository Hack Affecting Security Protocols

SailPoint Discloses GitHub Repository Hack Affecting Security Protocols
Reuters Reuters
Canvas' parent company reaches agreement with hacking group behind recent breach

Canvas' parent company reaches agreement with hacking group behind recent breach

By AJ Vicens May 12 (Reuters) - The hacking group that targeted the Canvas educational tool and the parent company that owns the software struck a deal to secure stolen student and school data, the company said in a statement late Monday.
Trendline Trendline
Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Affecting Users

Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Affecting Users

Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Affecting Users
Rapid Read Rapid Read
Instructure Confirms Canvas Security Breach, Impacting Educational Institutions

Instructure Confirms Canvas Security Breach, Impacting Educational Institutions

Instructure, the developer of the Canvas learning management system, has confirmed a security breach that allowed hackers to exploit vulnerabilities and deface login portals. The breach involved cross-site scripting (XSS) vulnerabilities, enabling attackers to gain authenticated admin sessions. This incident followed an initial breach where hackers stole over 3.6 terabytes of data. The attackers, identified as ShinyHunters, used the same vulnerability to pressure Instructure into paying a ransom by defacing portals with extortion messages. The breach affected the Free-for-Teacher environment, a limited version of Canvas used by individual educators. Instructure has since taken steps to revoke unauthorized access, engage forensic experts, and apply additional safeguards.
Trendline Trendline
Skoda Data Breach Exposes Online Shop Customers' Personal Information

Skoda Data Breach Exposes Online Shop Customers' Personal Information

Skoda Data Breach Exposes Online Shop Customers' Personal Information
Rapid Read Rapid Read
ShinyHunters Targets Education Sector with Canvas Extortion Campaign

ShinyHunters Targets Education Sector with Canvas Extortion Campaign

The ShinyHunters ransomware group has launched an extortion campaign targeting the education sector following a breach of Instructure, the company behind the Canvas Learning Management System. The breach, which occurred on April 25, resulted in the theft of approximately 275 million records from 8,809 educational institutions. ShinyHunters exploited a vulnerability in the Free-For-Teacher version of Canvas, exfiltrating over 3.65 TB of data. The group initially demanded a ransom by May 8, threatening to leak the data if not paid. After the deadline passed, they intensified their efforts with a school-by-school extortion campaign, defacing around 330 institutional Canvas login pages with ransom demands. Instructure has not engaged with the group but has implemented security patches.
Rapid Read Rapid Read
FBI Urges Router Security Measures Following Russian Cyber Attacks

FBI Urges Router Security Measures Following Russian Cyber Attacks

The FBI, along with the NSA, has issued a warning to the public regarding a cyber attack by a Russian military intelligence unit known as APT28 or Fancy Bear. This group has been compromising home and small office routers across 23 states since at least 2024. The attack involves intercepting credentials and sensitive communications by exploiting vulnerabilities in routers. The FBI has taken the unusual step of remotely resetting thousands of affected devices under a court order. However, they emphasize that individual router owners must take action to secure their devices. The agency recommends updating router firmware and changing default login credentials to prevent further exploitation.
Trendline Trendline
Skoda Discloses Data Breach Affecting Online Shop Customers

Skoda Discloses Data Breach Affecting Online Shop Customers

Skoda Discloses Data Breach Affecting Online Shop Customers
Rapid Read Rapid Read
Canvas Education Platform Hack Disrupts Schools Across the U.S.

Canvas Education Platform Hack Disrupts Schools Across the U.S.

The Canvas education platform, widely used by schools across the United States, has been compromised in a cybersecurity incident. This breach has led to significant disruptions in educational activities, particularly affecting students as they approach final exams. The parent company of Canvas has acknowledged the incident, which has raised concerns about the security of educational data and the reliability of digital learning tools. The hack has impacted thousands of schools, causing delays and interruptions in the delivery of educational content and assessments. This incident highlights the vulnerabilities in the digital infrastructure that supports modern education, especially as schools increasingly rely on online platforms for teaching and learning.
Rapid Read Rapid Read
Canvas System Restored After Cyberattack Disrupts Schools Nationwide

Canvas System Restored After Cyberattack Disrupts Schools Nationwide

The Canvas online learning platform, used by thousands of schools globally, has been restored following a cyberattack that disrupted access for students and educators. The attack, claimed by the hacking group ShinyHunters, affected nearly 9,000 schools, compromising billions of private messages and records. The breach occurred as students were preparing for final exams, causing widespread panic and confusion. Instructure, the company behind Canvas, took the system offline to contain the breach and investigate. The attack exploited vulnerabilities in Free-For-Teacher accounts, which have been temporarily disabled. The incident highlights the increasing vulnerability of educational institutions to cyber threats.
Rapid Read Rapid Read
Maryland Schools Recover from Canvas Data Breach Disruption

Maryland Schools Recover from Canvas Data Breach Disruption

A recent cyberattack on the Canvas online learning management system caused significant disruption for school districts and colleges in Maryland. The breach led to chaos as students and educators were unable to access the platform, which is essential for managing coursework and communication. The system has since been restored, but the incident highlights vulnerabilities in educational technology infrastructure. Students and faculty are reacting to the breach, expressing concerns about data security and the impact on their academic activities.
Rapid Read Rapid Read
Universities Postpone Final Exams Following Canvas Hack, Affecting Students Nationwide

Universities Postpone Final Exams Following Canvas Hack, Affecting Students Nationwide

Colleges and universities across the United States have postponed final exams and assignment deadlines due to a hack on Canvas, a widely used learning management system. The disruption affected 41% of North American higher education institutions. The University of Illinois at Urbana-Champaign and Baylor University are among those that have rescheduled exams, with Baylor planning to restore access to its Canvas system after the company, Instructure, resolved the issue. Arizona State University and the University of California System have also taken precautionary measures, with the latter temporarily blocking Canvas access until security is assured. The hack, claimed by the criminal group ShinyHunters, reportedly compromised personal information for millions of students and employees worldwide. Instructure has since restored Canvas but has temporarily shut down its Free-For-Teacher accounts to prevent further unauthorized access.