Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-10T01:23:29Z•4a9b1b4e800204cecf0f58ae6585206b52e215d6dcfa7f354b5c564a47da071a
Adobe ReaderAisuruBlueHammerBrazilCanvasChromeDDoSIoT botnetJackSkid','Mossad','wiper','CanisterWorm','Iran','Stryker','REv|KimwolfMicrosoft Patch TuesdayRussiaSIM‑swapScattered SpiderSharePointanti‑DDoSbotnetdata extortioneducationnation‑statephishingransomwarerouter exploitationtoken theftzero‑day
What happened
Multiple high-impact cyber incidents and patch advisories: A widespread data‑extortion attack against Canvas disrupted classes after the service's login page was defaced with a ransom demand threatening data from ~275 million students and faculty across ~9,000 institutions. A Brazilian anti‑DDoS vendor was implicated in enabling a botnet used to launch large DDoS campaigns against ISPs. A senior Scattered Spider member pleaded guilty to wire fraud and aggravated identity theft for SMS‑phishing operations. Microsoft’s April Patch Tuesday fixed 167 vulnerabilities (including a SharePoint Server
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 4a9b1b4e800204cecf0f58ae6585206b52e215d6dcfa7f354b5c564a47da071a
- Enrichment time
- 2026-05-10T01:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.