Canvas Breach Disrupts Schools & Colleges Nationwide

2026-05-08T13:23:38Z6cf994d6d8c92ea1e06925815671d8841155a873722d3a68963930a1b1d15551
BlueHammerCanisterWormCanvasDDoSGandCrabIoT-botnetIran-targetingMicrosoftREvilRussiaScattered-SpiderSharePointanti-DDoSbotnetdata-extortioneducationlaw-enforcementpatch-tuesdayransom-demandransomwarerouter-exploitstate-sponsoredtoken-harvestwiperzero-day

What happened

A series of high-impact cyber incidents and remediation efforts: a widespread data-extortion attack defaced Canvas and threatened data from ~275 million students and staff at nearly 9,000 institutions; a Brazilian anti‑DDoS company was implicated in enabling a botnet used to attack ISPs; a senior "Scattered Spider" member pled guilty for SIM/text‑phishing intrusions into major tech firms; multiple Patch Tuesday rollouts from Microsoft, Google and Adobe fixed dozens of vulnerabilities (including a SharePoint zero‑day and the Windows Defender "BlueHammer" issue); Russian military‑linked actorsex

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
6cf994d6d8c92ea1e06925815671d8841155a873722d3a68963930a1b1d15551
Enrichment time
2026-05-08T13:23:38Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.