Canvas Breach Disrupts Schools & Colleges Nationwide

2026-05-10T13:23:29Z98845d07d6515ad8f8ec5315852f68dee126afe7778f65c85d3f079b8ae976bb
adobe-readeranti-ddos-abusebluehammercanisterwormcanvaschrome-zero-daydata-extortionddoseducation-sectoriot-botnetiran-linkedlaw-enforcement-takedownmicrosoft-patchoffice-auth-tokensransomwarerouter-exploitrussian-aptscattered-spiderservice-defacementsharepointtoken-theftwindows-defenderwiperzero-day

What happened

Multiple high-impact incidents reported: a large-scale data extortion/defacement attack on the Canvas education platform claiming data from ~275 million students/faculty across ~9,000 institutions and disrupting coursework; Microsoft April Patch Tuesday addressing 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw dubbed “BlueHammer”), plus Chrome and Adobe Reader zero-day fixes; Russian state-linked actors exploiting legacy router flaws to harvest Microsoft Office authentication tokens from ~18,000 networks; a Brazilian anti‑DDoS vendor被

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
98845d07d6515ad8f8ec5315852f68dee126afe7778f65c85d3f079b8ae976bb
Enrichment time
2026-05-10T13:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.