Free Accounts, Real Risk: How a Canvas Workflow Became the Weak Link

A security incident in Instructure’s Canvas ecosystem shows how a seemingly low-risk onboarding path can turn into a platform trust problem when identity controls are not tightly isolated.

When a Free Signup Path Turns Into an Extortion Lever

A public account tier in a major learning platform shows how cloud security failures can start with identity and trust, not malware.

Digital Blackmail on Campus: ShinyHunters Hijack Canvas Portals in Global University Attack