Canvas Breach Disrupts Schools & Colleges Nationwide

This collection of KrebsOnSecurity reports covers multiple high-impact cyber incidents: a large-scale data-extortion attack that defaced Canvas and threatened data on ~275 million students and staff nationwide; a Brazilian anti‑DDoS firm implicated in enabling botnet attacks against ISPs; plea by a Scattered Spider member for SMS‑phishing-enabled intrusions; active zero‑day vulnerabilities fixed in Microsoft (including a SharePoint Server zero‑day and a Windows Defender flaw called "BlueHammer"), Google Chrome, and Adobe Reader; Russian-linked mass harvesting of Microsoft Office authentication