Cybersecurity News Bulletin: May 10, 2026

Cybersecurity News: Week of May 10, 2026

1. Salem State University encountering cybersecurity incident at Instructure affecting the Canvas Learning Management System. Reported by ITS team on May 8, 2026. (like many others)

   A group called ShinyHunters exploited a flaw in Instructure’s “Free-For-Teacher” accounts, altered login pages, and demanded a ransom. Instructure took Canvas offline to contain it, and whole most access is back, the breach exposed some personal data like messages – though they say passwords and financial info weren’t touched.  For the latest updates refer to status page: https://status.instructure.com.

2. Day Zero Readiness: The Operational Gaps That Break Incident Response
3. 135 New CVEs Daily. 55 Days to Remediate. You Can't Patch Fast Enough
4. PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux 
5. From Phishing to Recovery: Breaking the Ransomware Attack Chain
6. MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack
7. Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads
8. One Click, Total Shutdown: The "Patient Zero" Webinar on Killing Stealth Breaches
9. Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
10. One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk
11. The 2026 Cyber Threat Trends Report
12. Integrating AI, Security and Advanced Network Tech in Government

Learn more about the Cyber Range at Salem State University