Acronis Cyberthreats Update, June 2026

In May 2026, Instructure's Canvas platform was breached and publicly claimed by the ShinyHunters extortion group, who said they exfiltrated approximately 280 million records spanning thousands of educational institutions and later leveraged cross-site scripting (XSS) vulnerabilities in the Free-for-Teacher environment to obtain admin sessions and deface hundreds of login portals; Instructure responded by revoking access, patching, rotating keys, engaging forensics, and temporarily disabling affected free accounts. The report also provides Acronis telemetry on global malware detection rates for May 2026 and recommends multilayered protections (behavioral detection, AI/ML, anti-ransomware, email/URL filtering, and XDR) to mitigate such threats.