ShinyHunters escalates Canvas attacks with school login defacements

ShinyHunters claimed to have stolen extensive data from Instructure’s cloud-hosted Canvas environment involving schools and universities. The group then used another vulnerability in Instructure’s systems to modify Canvas web logins and the Canvas app for hundreds of educational institutions and display a ransom message.