Canvas attack aftermath: What risks come next?

Sophos published multiple security updates and incident analyses: a data compromise tied to Canvas (attributed to groups/tags including ShinyHunters and GOLD CRYSTAL) exposing student data; a supply-chain breach where a malicious VS Code extension allowed cloning of private GitHub repositories which were offered for sale; active WantToCry ransomware campaigns using SMB brute-force to remotely encrypt files; coverage of the AMOS macOS infostealer stealing data at scale; and a May Patch Tuesday roundup noting 132 CVEs (many already mitigated). Sophos also published guidance on reducing AI-agent/