The Security box, podcast 272, Intermediate A: The Canvas Breach

The podcast is now available through RSS feed.

We’ve been keeping tabs on this, and it may be looking like the educational system is going in the wrong direction.

Here are the show notes for this program, and I hope you enjoy the show!

Hello folks, welcome to a special TSB program covering the Canvas hack. How bad is it? What is known? How does it compare to other breaches like PowerSchool and others? We’ll discuss it from within this podcast.

Here are articles that we’ve read that have covered the saga from when we’ve laid eyes on it. This is not evrything, and some of this may be blogged on our blog.

• Instructure hacker claims data theft from 8,800 schools, universities
• What we know about the Canvas hack that has impacted thousands of schools
• Instructure confirms hackers used Canvas flaw to deface portals
• Instructure reaches ‘agreement’ with ShinyHunters to stop data leak
• US govt seeks Instructure testimony on massive Canvas cyberattack

There are other outlets also covering this, including the BBC, PC Magazine, The Cyberwire Podcast, and more.

We are not reading and discussing any particular article, we’re painting a picture of what seems to be the overall problem and how Canvas is now joining the party of very large breaches.

Their PR was great, telling users what was going on, but yet, when you hear how the actors got in, you’ll start wondering.

Contact information is going to be given throughout the program, and thanks so much for listening to this special program. See you next time!