Add your product or open-source project on TechLogHub
Listing is free. Sponsored featured placements are paid and priced in USD — open the pricing dialog to see plan details.
Loading...
Explore software products worth tracking, open-source projects worth studying, and blog coverage that helps builders spot useful tools and ideas sooner.
Listing is free. Sponsored featured placements are paid and priced in USD — open the pricing dialog to see plan details.
Analysis, product insight, and practical reads for builders

US House Homeland Security Committee has asked Instructure to testify by May 21 about two ShinyHunters cyberattacks on the Canvas platform that exposed millions of student and staff records and disrupted final exams across multiple states; Instructure disclosed the breach on May 3 (intrusion detected April 29), with exposed data including names, emails and student IDs, while a second attack defaced login portals, and ShinyHunters later claimed extensive data theft and, after pressure, said the data was destroyed.

UK ICO fines South Staffordshire Water Plc £963,900 ($1.3M) for a 2020–2022 data breach that exposed the personal data of around 664,000 customers and staff, due to multiple security failures and a phishing-driven malware intrusion that went undetected for 20 months.

Instructure has announced an agreement with the ShinyHunters extortion group to stop the leakage of data stolen in a breach of the Canvas LMS, with the stolen data returned and destruction logs provided. The incident affected more than 30 million educators and students across 8,000 schools and universities, and ShinyHunters claimed about 3.6TB of data was stolen after exploiting Free-for-Teacher XSS flaws and even defaced Canvas login pages on May 7. Canvas has been restored, Free-for-Teacher accounts were temporarily shut, and Instructure will share further updates in a May 13 webinar; the FBI cautions that paying a ransom does not guarantee safety from further extortion.

Instructure confirmed that hackers exploited a Canvas vulnerability to deface login portals and leave an extortion message, using multiple XSS flaws to gain authenticated admin sessions. A second attack on May 7 leveraged the same flaw to pressure a ransom after an initial breach disclosed on April 29. The Free-for-Teacher environment was affected, Canvas was offline briefly and restored by May 9, and ShinyHunters claim to have stolen data from 8,809 institutions—up to 275 million records—though the defacement itself did not compromise data.
Subscribe to our newsletter for updates.