// day
May 1, 2026
3 new incidents, 0 with updates.
## started
- highclosedpartial fixclosed May 31, 2026
Instructure Canvas Free-for-Teacher breach (ShinyHunters)
› Instructure Canvas (Free-for-Teacher)
In May 2026 Instructure confirmed a security incident involving Canvas Free-for-Teacher after ShinyHunters claimed theft of data tied to hundreds of millions of users. Exposed data included names, emails, student IDs and some private messages; Instructure said it had no evidence passwords or financial/government IDs were taken.
- highclosedpatchedclosed May 1, 2026
Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
› Linux Kernel
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation. Added to CISA KEV on 2026-05-01.
CVE-2026-31431 - highclosedpatchedclosed May 31, 2026
OpenAI employee devices hit via TanStack Mini Shai-Hulud wave
› TanStack-related npm packages / OpenAI employee endpoints
In May 2026 OpenAI confirmed two employee devices were breached as part of the broader TanStack Mini Shai-Hulud npm supply-chain campaign. OpenAI said customer data, production systems, IP and deployed software were not impacted.
