Instructure confirms hackers used Canvas flaw to deface portals

Instructure confirmed a security vulnerability in Canvas allowed hackers to modify login portals and leave an extortion message. The issue was related to a flaw in the Canvas platform. Hackers exploited this flaw to deface the portals.