INSTRUCTURE PROBES CYBERSECURITY BREACH

SECURITY DESK■ 1 MIN READ

SAT, MAY 2, 2026

■ AI-SUMMARIZED FROM 1 SOURCE BELOW

Canvas learning platform provider Instructure has disclosed a recent cybersecurity incident and is investigating the scope of the breach. The company has not yet detailed what data may have been compromised.

Instructure, which operates Canvas—a learning management system used by schools and universities worldwide—confirmed the security incident but provided limited details on the attack's nature or timeline. The company is currently assessing the incident's impact and has not disclosed whether student or employee data was accessed. Instructure did not specify the attack method or whether ransomware was involved. Canvas serves millions of users globally, making any breach potentially significant for educational institutions. Schools and universities relying on the platform may face questions from stakeholders about data protection measures. Instructure typically communicates security matters through official channels. Further updates on the investigation and its findings are expected as the company completes its assessment.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P645SECURITY THROUGH OBSCURITY GETS REASSESSMENT

A contrarian perspective challenges the long-held security principle that obscurity alone cannot protect systems. The argument sparked discussion across the developer community with 107 comments on Hacker News.

1H AGO— Security Desk

P644TELECOM NETWORKS EXPLOITED BY COVERT SURVEILLANCE

Global telecommunications infrastructure is being systematically compromised by state-sponsored surveillance actors, according to security researchers. The widespread exploitation affects carriers worldwide and enables large-scale monitoring of communications.

4H AGO— Security Desk

P640INSTRUCTURE CONFIRMS DATA BREACH BY SHINYHUNTERS

Educational technology company Instructure has acknowledged a cyberattack in which the ShinyHunters extortion gang claims to have stolen user data. The breach affects the Canvas learning platform used by millions of students and educators worldwide.

11H AGO— AI Desk

P637MICROSOFT DEFENDER FALSELY FLAGS DIGICERT CERTS

Microsoft Defender is mistakenly identifying legitimate DigiCert root certificates as malware, triggering widespread false-positive alerts and certificate removals on Windows systems.

14H AGO— Industry Desk

◄ BACK TO NEWS

INSTRUCTURE PROBES CYBERSECURITY BREACH

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF