Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-09T13:23:26Z•e1975ab10e746acce31f5d2edd501e48505daea2e2ebcff2d0fdd812f304b6c8
Adobe ReaderAisuru','Kimwolf','JackSkid','MossadCanvasChromeDDoSIoT botnetsIranMicrosoft Patch TuesdayRussiaScattered SpiderSharePointStrykerWindows Defender (BlueHammer)anti‑DDoSbotnetdata‑extortioneducationlaw‑enforcementnation‑statephishingransomwarerouter vulnerabilitiestoken harvestingwiperzero‑day
What happened
KrebsOnSecurity roundup (Mar–May 2026): A widespread data‑extortion/defacement against Canvas disrupted US schools and threatened data from ~275M students/faculty; an anti‑DDoS vendor in Brazil was implicated in enabling a botnet used to DDoS ISPs; a senior Scattered Spider member pleaded guilty for 2022 SMS‑phishing intrusions; multiple Microsoft Patch Tuesday releases (Mar/Apr) fixed dozens to hundreds of vulnerabilities including a SharePoint zero‑day and a Windows Defender issue dubbed “BlueHammer”; Google Chrome and Adobe fixed active zero‑days; Russian state‑linked actors exploited old/v
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e1975ab10e746acce31f5d2edd501e48505daea2e2ebcff2d0fdd812f304b6c8
- Enrichment time
- 2026-05-09T13:23:26Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.