EdTech Attackers Shift From Schools to Their Software Suppliers

This article reports a concerning shift in cyberattacks targeting the education sector, with attackers now focusing on edtech software suppliers like Instructure and Oracle rather than individual schools. The Shiny Hunters group is responsible for disruptive attacks on Canvas and PeopleSoft, impacting potentially millions of users across thousands of institutions and highlighting vulnerabilities within the software supply chain. The attacks underscore the high-value data held by edtech companies and the limited security resources often available to educational organizations, making them attractive targets.