Tracked topic
Instructure confirms hackers used Canvas flaw to deface portals By Ionut Ilascu May 11, 2026 11:26 AM Education technology giant Instructure has confirmed that a security vulnerability allowed hackers to modify Canvas login portals and leave an extortion message. …
… Admins can quickly check whether their firewalls are configured to use the vulnerable service from the User-ID Authentication Portal Settings page, found under Device User Identification Authentication Portal Settings - Enable Authentication Portal. On Wednesday, the U.S. …
Canvas login portals hacked in mass ShinyHunters extortion campaign By Lawrence Abrams May 7, 2026 06:36 PM The ShinyHunters extortion gang has breached education technology giant Instructure again, this time exploiting a vulnerability to deface Canvas login portals for hundreds of colleges and uni… …
… As Škoda revealed, threat actors gained access by exploiting an unspecified vulnerability in the software of its e-commerce portal. …
… Download Now Related Articles: Instructure hacker claims data theft from 8,800 schools, universities Instructure confirms data breach, ShinyHunters claims attack US govt seeks Instructure testimony on massive Canvas cyberattack Instructure confirms hackers used Canvas flaw to deface portals Canvas … …
… The researchers said that the campaigns primarily targeted Microsoft 365 environments using phishing emails that directed victims to Microsoft's device code login portal, where they unknowingly authorized attackers to access their accounts. …
… According to Sansec, the attacker-controlled server delivers a customized payment card skimmer that steals the following information: Credit card numbers CVVs Billing addresses Other customer information Payment card skimmers enable threat actors to make fraudulent online purchases, while stolen re… …
… Drupal website administrators should continue to monitor the platform’s official security portal throughout the day for more information and prepare to apply the security update as soon as it’s made available. …
… Download Now Related Articles: Instructure reaches 'agreement' with ShinyHunters to stop data leak Trellix source code breach claimed by RansomHouse hackers Canvas login portals hacked in mass ShinyHunters extortion campaign Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison Cr… …
… RansomHouse is a cybercrime group that launched in 2022 as a data-extortion operation, listing victims on a darkweb portal and leaking or selling data stolen from their corporate networks. …