Canvas Breach Disrupts Schools & Colleges Nationwide

Multiple high-impact cyber incidents and disclosures: a large extortion/data-theft campaign defaced Canvas login pages and threatened to leak data on ~275 million students and staff across ~9,000 institutions; a Brazilian anti-DDoS firm was implicated in enabling a botnet that hit ISPs; Russian-linked actors exploited known router flaws to harvest Microsoft Office authentication tokens from ~18,000 networks; Microsoft pushed large Patch Tuesday updates (April) fixing 167 vulnerabilities including a SharePoint zero-day and a publicly disclosed Windows Defender issue dubbed "BlueHammer"; U.S./EU