🚨 BREAKING: ShinyHunters defaced Canvas login portals for hundreds of colleges and universities today, replacing them with extortion demands tied to the recent Instructure breach. Sources tell BleepingComputer that the hackers exploited another unpatched vulnerability in Instructure’s systems, allowing them to hijack approximately 330 Canvas portals and display ransom messages to students and staff. What happened: 🔴 Canvas login portals were replaced with ShinyHunters extortion messages 🔴 The messages warned schools to negotiate before May 12 or student data would be leaked 🔴 The defacements also appeared inside the Canvas mobile app The portals were visible for about 30 minutes before being taken offline as Instructure responded to the incident. This follows last week’s breach where ShinyHunters claimed to have stolen 280 million student and staff records tied to thousands of schools using Canvas.

Medtech giant Stryker offline after Iran-linked wiper malware attack bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…