ShinyHunters hijacked the login portals of multiple schools that use Instructure’s Canvas platform. The defacement displayed an extortion message that warned of continued denial of service unless a payment was made.

The cybercrime group announced the attack on TechCrunch, noting that the message appeared on the login pages of “several” Instructure customer schools. No school names were disclosed, and the post did not include a de…

Instructure responded by confirming that the login pages were altered and that its security team was investigating. The company did not release details about the number of affected institutions or the scope of data ex…

An unrelated threat actor surfaced on the same day, targeting systems that had previously fallen to the TeamPCP ransomware gang. The unknown group entered the compromised networks, expelled TeamPCP’s implants, and era…