Canvas attack aftermath: What risks come next?

Sophos published a multi-article briefing covering several active and emerging threats: a Canvas student-data compromise attributed to groups including ShinyHunters/GOLD CRYSTAL, a supply-chain/code-editor incident where a malicious VS Code extension led to cloned private GitHub repositories, and WantToCry ransomware using SMB brute-force to remotely encrypt files. Additional research highlights the AMOS macOS infostealer operating at scale and a heavy May Patch Tuesday with ~132 Microsoft-related CVEs (advisories approaching 300). The feed also includes Sophos product/market updates and an "I