Cyber Security News

Hacking Editorial Brief – May 10, 2026

The Canvas learning management system suffered a significant breach this week, exposing personal data belonging to millions of K-12 and university students across the United States. Service disruptions lasted several hours on Thursday, and the FBI has mobilized resources across multiple states to support affected institutions. Canvas is widely deployed in educational environments, making the scope of potential data exposure particularly severe. Investigations are ongoing to determine the full extent of compromised information and the identity of the threat actors responsible.

In other activity, Iran-linked group Handala claims to have breached secure phones belonging to U.S. Navy officers, allegedly obtaining sensitive operational information including base locations and warship routes. The group describes the intelligence as a "target bank," though independent verification of the claimed access remains pending. Separately, cPanel and WHM released patches for three vulnerabilities, including two critical flaws rated 8.8 CVSS that could enable code execution and privilege escalation. The Mirai-based botnet xlabs_v1 continues targeting exposed Android Debug Bridge services on port 5555, expanding its IoT device footprint through automated exploitation.

Sources: KOMU · NPR · The Hacker News