Summary

Instructure's Canvas platform was breached a second time on May 7, 2026, by ShinyHunters, who exploited a vulnerability in the Free-For-Teacher program's support-ticket function to pivot into shared back-end infrastructure, deface ~330 institutional login pages with a ransom note, and pressure payment for data stolen in the prior April 25 breach.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines