Record · corpus.blog/posts/01a087dc-ca31-73b2-8549-339a61ae4864

The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students

scotthelme.co.uk · published 15 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at scotthelme.co.uk Wayback capture

1blogs citing

First cited: 23 Jun 2026
Most recent: 23 Jun 2026
Rank this month: not ranked
Links from this post: 23
Words captured: 3,532

Cited by

Blog

In the post

Date

☘️ juni-personal ☘️

(88) thought con(tagion), or congestion? Read at the source ↗

23 Jun 2026

Links from this post

Link

Host

https://scotthelme.co.uk/integrity-policy-monitoring-and-enforcing-the-use-of-sri/?utm_source=scotthelme.co.uk

scotthelme.co.uk

https://www.instructure.com/incident_update?utm_source=scotthelme.co.uk

instructure.com

https://www.instructure.com/resources/webinar/technical-deep-dive-recent-security-incident?utm_source=scotthelme.co.uk

instructure.com

https://onedtech.philhillaa.com/p/a-technical-deep-dive-is-not-a-crisis-response?utm_source=scotthelme.co.uk

onedtech.philhillaa.com

https://onedtech.philhillaa.com/p/instructure-is-risking-the-trust-that-built-canvas?utm_source=scotthelme.co.uk

onedtech.philhillaa.com

https://onedtech.philhillaa.com/p/one-step-forward-one-step-back-instructure-cyber-attack-2026?utm_source=scotthelme.co.uk

onedtech.philhillaa.com

https://www.bleepingcomputer.com/news/security/instructure-confirms-hackers-used-canvas-flaw-to-deface-portals/?utm_source=scotthelme.co.uk

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/canvas-login-portals-hacked-in-mass-shinyhunters-extortion-campaign/?utm_source=scotthelme.co.uk

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/?utm_source=scotthelme.co.uk

bleepingcomputer.com

https://techcrunch.com/2026/05/07/hackers-deface-school-login-pages-after-claiming-another-instructure-hack/?utm_source=scotthelme.co.uk

techcrunch.com

https://www.theregister.com/cyber-crime/2026/05/12/congress-investigates-canvas-breach-after-instructure-cuts-deal-with-shinyhunters/5238927?utm_source=scotthelme.co.uk

theregister.com

https://thehackernews.com/2026/05/instructure-reaches-ransom-agreement.html?utm_source=scotthelme.co.uk

thehackernews.com

https://www.malwarebytes.com/blog/news/2026/05/shinyhunters-escalates-canvas-attacks-with-school-login-defacements?utm_source=scotthelme.co.uk

malwarebytes.com

https://fsapartners.ed.gov/knowledge-center/library/electronic-announcements/2026-05-12/technology-security-alert-ongoing-cybersecurity-incident-involving-canvas-learning-management-system?utm_source=scotthelme.co.uk

fsapartners.ed.gov

https://businessinsights.bitdefender.com/technical-advisory-shinyhunters-breach-instructure-canvas-lms?utm_source=scotthelme.co.uk

businessinsights.bitdefender.com

https://www.trendmicro.com/en_us/research/26/e/What-Is-the-Instructure-Canvas-Breach.html?utm_source=scotthelme.co.uk

trendmicro.com

https://ailearninsights.substack.com/p/what-can-we-infer-from-canvass-technical

ailearninsights.substack.com

https://github.com/instructure/canvas-lms?utm_source=scotthelme.co.uk

github.com

https://github.com/instructure/canvas-lms/blob/master/gems/canvas_sanitize/lib/canvas_sanitize/canvas_sanitize.rb?utm_source=scotthelme.co.uk

github.com

https://nvd.nist.gov/vuln/detail/CVE-2021-36539?utm_source=scotthelme.co.uk

nvd.nist.gov

https://github.com/andrew-healey/canvas-lms-vuln?utm_source=scotthelme.co.uk

github.com

https://github.com/andrew-healey/example-canvas-xss-attack?utm_source=scotthelme.co.uk

github.com

https://en.wikipedia.org/wiki/2026_Canvas_security_incident?utm_source=scotthelme.co.uk

en.wikipedia.org