[namenonamen]

The ShinyHunters extortion gang has breached education technology giant Instructure again, this time exploiting another vulnerability to deface Canvas login portals for hundreds of colleges and universities.

https://www.bleepingcomputer.com/news/se...-campaign/

nice

[felowfren]

Insane, this might be the most mainstream breach in recent history. Now ShinyHunters is the first group that even schoolkids know the name of.

[henrypurcell]

I've seen reports that someone from ShinyHunters leaked part of the breach on doxbin, though idk if it's a larp using other school leaks, or that canvas didn't pay a ransom.

https://www.reddit.com/r/canvas/comments...pparently/

At around 5:30 GMT on the 8th, I checked the SH site and they removed all references to ransoming Instructure any further, which led me to believe they paid their ransom, so it's strange to think they'd leak the breach anyways given how much of a reputation they lose for their integrity. My guess is this is likely some larp/skid who wants attention given that SH's official site still has the Instructure ransom taken down.

Also just to keep the ball rolling about this topic, here's an archive of the link to the list of schools affected: https://web.archive.org/web/202605070420...s_list.txt

[phas3lock]

I saw reddit posts from my country about one of the universities here being affected