ShinyHunters Claims Second Attack Against Instructure

DarkReading roundup of mid-2026 incidents highlighting a surge in supply-chain attacks, large data breaches, and high-impact malware. Key items include ShinyHunters' second attack on Instructure (Canvas) with PII exposure risk to schools, TeamPCP/PCPJack supply-chain and cloud-theft activity (including compromised npm/SAP packages and novel parquet-based target discovery), and multiple supply-chain campaigns (GlassWorm VS Code extensions). Significant malware and extortion activity noted (VoidStealer infostealer, Vidar, Vect ransomware acting like a wiper, Lotus Wiper), plus nation-state and A