Latest Internet & Cybersecurity News

📅May 9, 2026 at 1:00 AM
Canvas LMS suffers major nationwide cyberattack with data theft claims; Palo Alto PAN-OS RCE exploited; Ivanti vulnerabilities exposed; intensified Russian cyber threats.
1

Canvas Learning Platform Hit by Major Cybersecurity Attack

The Canvas LMS, used by universities across the US including Cal Poly and Harvard, is down due to a cyberattack by threat actors claiming to have stolen 275 million records from Instructure. Access blocked out of caution; some students report partial access issues. Local schools like UMass Lowell postponing finals. Source 1Source 2

2

Hacking Group Demands Ransom for Millions of Stolen Student Records

Criminal extortion group 'Shining Hunters' claims to hold personal data of over 275 million students, instructors, and more from Canvas/Instructure. Demands payment by next Tuesday or data release; nationwide outage disrupts grades, quizzes, and finals. Source 1Source 2

3

Cal Poly Blocks Canvas Access Amid Escalating Cyber Threat

Cal Poly sent email alerting of escalated attack on instructors; California State University campuses temporarily blocked Canvas access until security confirmed. Students see error messages when trying to log in. Source 1

4

Massachusetts Schools Including Harvard and BC Impacted by Canvas Outage

Nationwide Canvas incident affects Harvard, Boston College, Northeastern, UMass Lowell; latter postponing finals. Students met with hacking group messages demanding ransom for hostage data. Source 2

5

Palo Alto PAN-OS RCE Exploit Under Active Use for Root Access and Espionage

Palo Alto Networks' PAN-OS software faces actively exploited remote code execution vulnerability enabling root access and espionage. Fixes expected May 13th; restrict access to trusted zones or disable portal. Source 3

6

Ivanti EPMM Vulnerabilities Exposed on Over 850 IP Addresses Worldwide

Internet security watchdog Shadow Server tracks over 850 exposed Ivanti EPMM instances online, mostly in Europe and North America. Warns of risks following recent exploits. Source 3

7

US Water Supply Operations Face Direct Cyber Risks from Hostile Activity

Agency reports direct risk to water supply continuity from intensified cyber activity, acknowledging threats from Russian Federation without naming specific groups. Source 3

8

Polish Intel Warns of Intensified Hacker Attacks

Polish intelligence issues warnings about ongoing hacker attacks amid broader cyber threats landscape. Featured in daily cyber headlines roundup. Source 3

9

Canvas Parent Company Instructure Targeted in Criminal Extortion

Instructure, Canvas's parent, hit by extortion group claiming massive data theft including student and instructor records. Part of escalating nationwide platform disruption. Source 1

10

Nationwide Canvas Outage Cripples US Educational Institutions

Thousands of schools, colleges, and universities nationwide affected by Canvas cyber incident, blocking study, grades, and quiz access. Ongoing developments with threat actor escalation. Source 2