NewsSANS NewsBites
Instructure Took Canvas Offline Following Ransom Demand
NEOSEC enrichment — no mirror of the original source
The Canvas educational technology platform is back online after being taken down in response to a ransom demand. On Thursday, May 7, threat actors defaced the Canvas login page, demanding a ransom be paid or they would leak personal data. C
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesMore on Instructure
Other advisories
- MediumCVE-2021-36539Instructure Canvas Learning Management Service: Sicherheitslücke
- MediumCVE-2021-36539Instructure Canvas Learning Management Service: Sicherheitslücke
- MediumCVE-2020-5775Instructure Canvas Learning Management System (LMS): Server-Side-Request-Forgery (SSRF)
- MediumCVE-2020-5775Instructure Canvas Learning Management System (LMS): Server-Side-Request-Forgery (SSRF)
Other news entries
- Congress Puts Heat on Instructure After Canvas OutageNewsDark Reading
- Instructure Must Brief US House on Canvas DisruptionsNewsSANS NewsBites
- No Comment from Instructure, but Schools Communicate Following Data BreachBreachSANS NewsBites
- Instructure Canvas Free-for-Teacher breach (ShinyHunters)Breachpwn.watch
Source: https://www.instructure.com/
ID