DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students

232 · · June 15, 2026, 12:35 p.m.
xss CSP SRI Report URI Cybersecurity data breach XSS Vulnerability User Content Risks
Summary
This blog post discusses the Instructure Canvas breach that compromised 275 million student records due to a stored XSS vulnerability in a support ticket. It emphasizes the risks associated with untrusted user content in privileged systems and demonstrates how simple oversights can lead to significant security incidents.
Read full post on scotthelme.ghost.io →
MORE POSTS LIKE THIS
RingCentral - 1,596,490 breached accounts
Haveibeenpwned · Aug 13, 2026
data breach Cybersecurity
Thousands of UK government records leaked by hackers
Thestack · Aug 3, 2026
Security Hacking
Bank of Baroda Confirms Data Breach After Employee Device Compromise, Customer Accounts Remain Safe
neemaasharma-boop · Jul 27, 2026
Cybersecurity Cybersecurity
The Good, the Bad and the Ugly in Cybersecurity – Week 28
Sentinelone · Jul 10, 2026
Company Cyber
Data Breach at Indian Supplier Tata Electronics Exposes iPhone 18 Pro Details and Photos
Daring Fireball · Jun 30, 2026
data breach apple
Novo Nordisk Breach Exposes AI Models and Patient Data
Securityonline · Jun 16, 2026
data leak AI Model Theft
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google