Instructure strikes a deal with ShinyHunters.

This briefing reports three items: Instructure confirmed a data breach and reached an agreement with extortion group ShinyHunters after the actor listed stolen data and defaced ~330 Canvas login portals (attributed to a Free for Teacher vulnerability); Texas filed suit alleging Netflix unlawfully collected and shared user data; and Cyble disclosed a targeted cyberespionage campaign using humanitarian-themed phishing to deploy a fileless Python infostealer that harvests credentials, monitors activity, captures browser sessions, and provides remote desktop access.