TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Bleeping Computer

Edu tech firm Instructure discloses cyber incident, probes impact

Lawrence Abrams · 4 days ago · Read original ↗

ATT&CK techniques detected

2 predictions
T1588.006Vulnerabilities
41%
“found is still unpatched. ai chained four zero - days into one exploit that bypassed both renderer and os sandboxes. a wave of new exploits is coming. at the autonomous validation summit ( may 12 & 14 ), see how autonomous, context - rich validation finds what ' s exploitable, pr…”
T1525Implant Internal Image
39%
“with tools that rely on api keys. the company has not stated whether this maintenance is related to the security incident. bleepingcomputer contacted instructure earlier today with questions about the incident, but has not received a response. bleepingcomputer previously publishe…”

Summary

Instructure, the company behind the widely used Canvas learning platform, has disclosed that it recently suffered a cybersecurity incident and is now investigating its impact. [...]