Meta Ends Instagram Encryption, Canvas Hit by Ransomware Attack

Education technology company Instructure took its Canvas learning management platform offline for maintenance on Thursday after a ransomware attack, disrupting schoolwork for students across the US. Hackers using the name ShinyHunters claimed responsibility for the breach, according to Wired's reporting. The incident left students unable to access coursework and assignments during a critical academic period. Meta has ended support for end-to-end encrypted messages on Instagram, backtracking on its plans to protect users' privacy through encryption the company could not access. The company stopped offering encryption on Instagram on May 8, making it easier for the firm to technically access direct messages. Meta had introduced an opt-in version for Instagram and had planned it would eventually become the default setting. However, Meta decided in March that not enough people had opted in and removed the option. The U-turn has angered privacy and security experts who fear the rollback could damage end-to-end encryption efforts around the world. Meta previously rolled out default encryption for Messenger in 2023 after spending years building out the encryption systems needed to secure its chat apps. A security researcher found numerous vulnerabilities in Yarbo lawn mower robots that could allow hackers to remotely take over the machines, including camera feeds, as well as extract owners' email addresses, Wi-Fi passwords, and home locations. The Yarbo robot can cost $5,000 and functions as a lawn mower, leaf blower, snowblower, and edger. After a Yarbo spokesperson told The Verge that the robots' diagnostic environment was not publicly accessible, the reporter and researcher demonstrated the security flaws by nearly running over the reporter with a hijacked robot.