Instructure took a risky approach to recover stolen Canvas data

This feed rounds up multiple security and privacy developments: Instructure (Canvas) reportedly negotiated with the ShinyHunters extortion group to prevent leaked stolen data, implying a likely ransom payment; General Motors agreed to a $12.75M settlement with California over unlawful sale of drivers’ location/behavioral data; JetBrains patched a high-severity TeamCity vulnerability (CVE-2026-44413) that allows privilege escalation and possible unauthorized exposure of parts of the REST API; dnsmasq was disclosed to have six serious memory-safety/input-validation flaws enabling DNS cache‑poiso