CIRCLE WITH A DOT

𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞, 𝐓𝐫𝐚𝐧𝐬𝐩𝐚𝐫𝐞𝐧𝐜𝐲, 𝐚𝐧𝐝 𝐈𝐧𝐯𝐢𝐬𝐢𝐛𝐥𝐞 𝐕𝐢𝐜𝐭𝐢𝐦𝐬: 𝐃𝐢𝐬𝐬𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐝𝐬 𝐭𝐨 𝐭𝐡𝐞 𝐈𝐧𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞 𝐂𝐚𝐬𝐞A recent article published by DataBreaches.net by journalist Dissent addresses one of the most controversial issues in modern cybersecurity: the payment of ransoms following a cyberattack and the consequences such decisions can have not only on the companies involved, but also on the individuals whose data has been compromised.https://www.suspectfile.com/ransomware-transparency-and-invisible-victims-dissent-responds-to-the-instructure-case/#Canvas #Data_Breach #Instructure #Navigate360 #Ransom #Ransomware #ShinyHunters

#Instructure reaches 'agreement' with #ShinyHunters to stop data leakhttps://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/#cybersecurity #privacy #DataBreach #ransomware

#Instructure settles with hackers following massive student data thefthttps://securityaffairs.com/192059/cyber-crime/instructure-settles-with-hackers-following-massive-student-data-theft.html#securityaffairs #hacking

@knapjack While some have claimed that the Canvas login page was 'hacked' - including most of the intial media reports - I suspect it was the compromise of a built-in broadcast messaging feature. (Though, I suppose it could be both, or something else all together.)Reporter Joe Tidy (BBC) describes a report of how the delivery of Friday's exortion demand was experienced by active users: https://www.linkedin.com/posts/joe-tidy-1932764_its-really-hard-to-bring-cyber-attacks-to-share-7458959314469322754-yGR4?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAAZPKoBafm7-InJHSg6yNJntK99II1XwPk

"We conclude that institutions of higher education are currently ill-equipped to protect students and faculty required to use the #canvas #Instructure #LMS from data harvesting or exploitation." #edtech https://www.researchgate.net/publication/341046070_The_case_of_Canvas_Longitudinal_datafication_through_learning_management_systems

Too soon? #Canvas #Instructure #infosec #memes #rude #nsfw #cloud #cybersecurity

Instructure has posted an FAQ about the ongoing Canvas LMS cyber incident https://www.instructure.com/incident_update #edtech #canvas #instructure #edusec

Just in case anyone else is interested, these are the #UK universities listed in the #ShinyHunters #Instructure #Canvas breach list :Arkansas State UniversityBabson CollegeBath Spa UniversityBirmingham City UniversityCoventry UniversityCranfield UniversityEdge Hill UniversityGlasgow School of ArtHeriot-Watt UniversityKingston UniversityLondon Business SchoolLondon Metropolitan UniversitySwansea UniversityUniversity College BirminghamUniversity of BirminghamUniversity of BradfordUniversity of HertfordshireUniversity of HullUniversity of OxfordUniversity of StirlingUniversity of SunderlandUniversity of SussexUniversity of WinchesterUniversity of Wolverhampton

@Beachbum @briankrebs AWS bucket “issues” have been reported for this latest breach.

#Instructure hacker claims data theft from 8,800 schools, universitieshttps://www.bleepingcomputer.com/news/security/instructure-hacker-claims-data-theft-from-8-800-schools-universities/#cybersecurity #privacy #DataBreach #education