The Instructure Canvas Breach (2026): How a Single Support Ticket Exposed 275 Million Students
The Instructure Canvas breach exposed 275M students through stored XSS, hijacked sessions, weak CSP, and ShinyHuntersโ large-scale data thefthttps://thecybersecguru.com/analysis/instructure-canvas-breach-2026-stored-xss/
I wrote a thing, and if you're interested in #EdTech #TEL or #Education you might want to give it a wee read:
Instructure Pwned
๐๐ข๐ง๐๐ ๐๐ก๐๐ง ๐๐ข๐ ๐๐ฌ๐ค๐ข๐ง๐ ๐๐จ๐ซ ๐๐ฏ๐ข๐๐๐ง๐๐ ๐๐๐๐จ๐ฆ๐ โ๐๐๐๐๐ง๐๐ข๐ง๐ ๐๐ซ๐ข๐ฆ๐ข๐ง๐๐ฅ๐ฌโ?
Dissent responded harshly to these accusations, firmly rejecting any insinuation of collusion with criminal groups. The journalist pointed out that every time she asks for evidence to support certain claims, she is labeled โcriminal-friendlyโ or accused of being a mouthpiece for cybercriminals, simply for refusing to uncritically accept statements lacking public verification.
https://www.suspectfile.com/since-when-did-asking-for-evidence-become-defending-criminals/
#Canvas #Data_Breach #Instructure #Navigate360 #Ransom #ShinyHunters
NEW by me:
Another detail emerges about Instructure's agreement with ShinyHunters; Debate continues about whether to pay:
Cybersecurity experts make claims about ShinyHunters to journalists, but where is the evidence to support their claims? Journalists shouldn't just quote experts -- ask them the basis for their claims. How much evidence do they actually have to support their assertions?
#hackandleak #databreach #Instructure #ShinyHunters #ransom #journalism
#US govt seeks #Instructure testimony on massive #Canvas #cyberattack
The U.S. House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company's Canvas platform, allowing threat actors to steal student data and disrupt schools during final exams.
Instructure has reached an agreement with the #ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records worldwide from being publicly leaked.
Read: https://hackread.com/instructure-shinyhunters-deal-prevent-canvas-data-leak/
๐ก๏ธ Canvas Hacks: Lawmakers Grill Instructure Over Repeated Breaches
Millions of student records, compromised. Twice. That's got U.S. lawmakers demanding Instructure explain its repeated data breaches, questioning everything from incident response to basic security.
https://byte-pulse.net/article/canvas-hacks-lawmakers-grill-instructure-over-repeated-breaches
๐๐๐ง๐ฌ๐จ๐ฆ๐ฐ๐๐ซ๐, ๐๐ซ๐๐ง๐ฌ๐ฉ๐๐ซ๐๐ง๐๐ฒ, ๐๐ง๐ ๐๐ง๐ฏ๐ข๐ฌ๐ข๐๐ฅ๐ ๐๐ข๐๐ญ๐ข๐ฆ๐ฌ: ๐๐ข๐ฌ๐ฌ๐๐ง๐ญ ๐๐๐ฌ๐ฉ๐จ๐ง๐๐ฌ ๐ญ๐จ ๐ญ๐ก๐ ๐๐ง๐ฌ๐ญ๐ซ๐ฎ๐๐ญ๐ฎ๐ซ๐ ๐๐๐ฌ๐
A recent article published by DataBreaches.net by journalist Dissent addresses one of the most controversial issues in modern cybersecurity: the payment of ransoms following a cyberattack and the consequences such decisions can have not only on the companies involved, but also on the individuals whose data has been compromised.
#Canvas #Data_Breach #Instructure #Navigate360 #Ransom #Ransomware #ShinyHunters
The CyberSec Guru
Sonya McChristie
ransomNews
amvinfe
Dissent Doe 
UNWIRE.HK
The New Oil
Hackread.com
Byte-Pulse