Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-11T07:23:31Z•e4ebea41b7842b1dad5edc8bb0cedd67beda1525850daa1fbb7b7f8e9e5227bc
Adobe ReaderBrazilCanisterWormCanvasDDoSGandCrabGoogle ChromeMicrosoft Office tokensPatch TuesdayREvilRussiaScattered SpiderSharePointWindows Defender (BlueHammer)anti-DDoS abusebotnetdata extortiondoxingeducation sectorlaw enforcementphishingransomwarerouter compromisewiper malwarezero-day
What happened
Multiple high-impact cyber incidents and vulnerability disclosures were reported: a widespread data-extortion attack defaced Canvas login pages and threatened to leak data on ~275 million students and staff across ~9,000 institutions; a Brazilian anti-DDoS firm was implicated in enabling a botnet used to attack ISPs; a senior "Scattered Spider" member pleaded guilty for 2022 SMS-phishing intrusions; Microsoft and other vendors released large Patch Tuesday updates (April: 167 fixes including a SharePoint zero-day and a Windows Defender issue called “BlueHammer”; Chrome and Adobe also issued hot
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e4ebea41b7842b1dad5edc8bb0cedd67beda1525850daa1fbb7b7f8e9e5227bc
- Enrichment time
- 2026-05-11T07:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.