×
AirPods Pro 3 Vs. AirPods Pro 2: Which Wireless Earbuds Are Better?

AirPods Pro 3 Vs. AirPods Pro 2: Which Wireless Earbuds Are Better?

After years of speculation, Apple’s AirPods Pro 3 are finally here, and while we haven’t tried them for ourselves, they look like they were worth the wait. This generation brings new hardware, features, and some impressive improvements on paper over the last generation, which was refreshed in 2023 with USB-C and a few other features. If you’re in the market for new AirPods, you’re probably already wondering whether you should rush out to scoop up Apple’s long-awaited third-gen, but before you do that, you should know what you’re getting into.

Luckily, we’re here to give you a categorical breakdown that shows all of this year’s improvements and what’s the same as the AirPods Pro 2. Have at it, folks.

AirPods Pro 3 vs. AirPods Pro 2: ANC

© Andrew Liszewski | Gizmodo

When it comes to AirPods Pro, ANC is one of the most important categories, and this year’s generation is no different. Apple knows that, which is why it clearly went back to the lab and took a stab at improving noise-canceling gen over gen.

According to Apple, AirPods Pro 3 use “ultra-low noise microphones and advanced computational audio” to help give this generation 2x more ANC than AirPods Pro 2. That equates to 4x more ANC than the original AirPods Pro. It’s not all ANC, though. Apple says that this year’s earbuds should also improve passive noise cancellation, thanks to new ear tips that are filled with foam, creating a better seal in your ears.

Apple doesn’t provide specific numbers for how many dBs are cancelled by its earbuds, but from the sounds of it, AirPods Pro 3 should excel in the ANC department and maybe even give Bose’s QuietComfort Ultra earbuds (my favorite buds for ANC) a run for their money.

AirPods Pro 3 vs. AirPods Pro 2: Sound

Apple AirPods Pro 3 Hero 250909 Inline.jpg.large 2x
© Apple

I haven’t gotten to listen to AirPods Pro 3 myself yet, but Apple says its new generation boasts some improvements over the AirPods Pro 2. Behind that is a tweak to the AirPods Pro 3 architecture.

According to Apple, the AirPods Pro 3 have a “multiport acoustic architecture” that better controls the airflow and the way the sound carries to the ear. Apple couples that with a new Adaptive EQ, which is designed to give the AirPods Pro 3 a better bass response and widen the soundstage. Again, this all sounds good in theory, but we’ve yet to hear them for ourselves. On paper, at least, Apple’s AirPods 3 should be the best-sounding AirPods you can buy right now.

AirPods Pro 3 vs. AirPods Pro 2: Battery

Photo: Andrew Liszewski / Gizmodo
Photo: Andrew Liszewski / Gizmodo

Battery life is one of the biggest metrics of any good pair of wireless earbuds, and, again, AirPods Pro 3 roll the ball forward here. According to Apple, the AirPods Pro 3 now have 8 hours of playback with ANC on as opposed to the 6-hour average of the AirPods Pro 2. If you want to extend the battery life even longer, you can listen to the AirPods Pro 3 with transparency on (ANC off), and you’ll get 10 hours of battery life on a single charge, according to Apple.

There’s really no subjectivity here—more battery is just better—but if you’re curious, the AirPods Pro 3 improve upon the AirPods Pro 2 battery by 33 percent when it comes to ANC playback. On top of that, I’d say that AirPods Pro 3 also beat a lot of its non-Apple competition, which usually averages around 6 hours of battery with ANC on.

AirPods Pro 3 vs. AirPods Pro 2: Features

A person rides a train while wearing Apple AirPods 3.
© Apple

If you’re picking up on a trend, it’s that AirPods Pro 3 are pretty much better across the board, but this is where they really start to pull away. There are some things in the third-gen AirPods Pro that the AirPods Pro 2 just can’t do. One of those things is heart rate monitoring. Thanks to new IR sensors in the AirPods Pro 3, which are combined with the preexisting accelerometer, gyroscope, and GPS, these earbuds can track fitness goals, calories burned, and heart rate. According to Apple, AirPods Pro 3 will combine with its suite of fitness tools, allowing Apple Fitness+ users to see real-time performance metrics onscreen. And yes, unlike the PowerBeats Pro 2, you can listen to music while you track your health metrics.

Another exclusive feature with the AirPods Pro 3 is Live Translation, which does exactly what it sounds like—it translates speech in real time. One cool aspect of the AirPods Pro 3 translation feature is that it uses ANC to lower the voice of the person you’re talking to so you can actually hear the translation in your earbuds. While the feature is still in beta, Apple says you can currently use Live Translation for English, French, German, Portuguese, and Spanish, and Italian, Japanese, Korean, and Chinese are on the way.

That’s all to say that you’ll be able to do basically everything you can do with AirPods Pro 2 with the AirPods Pro 3—adaptive ANC, hearing test (though the AirPods Pro 3 is allegedly better at that), transparency, and more—but with two big new features in heart rate tracking and Live Translation. Point goes to AirPods Pro 3 once again.

AirPods Pro 3 vs. AirPods Pro 2: Comfort

Airpods Pro 2 Statue Of Liberty 1
© Photo: Kyle Barr / Gizmodo

Comfort is another huge metric for earbuds, especially if you plan to wear them for long periods or while you’re exercising. Once more, Apple seems to have taken strides here with its new generation of AirPods. While both earbuds have ear tips, Apple says that it used “over 10,000 ear scans with more than 100,000 hours of user research” to tweak the fit of AirPods Pro 3.

Specifically, Apple says the “external geometry of the ear tip” now aligns to the center of the body for more stability. AirPods Pro 3 also come with five ear tip sizes as opposed to four. With more sizes and a redesign, it looks like AirPods Pro 3 are poised to outpace the AirPods Pro 2 in comfort, too.

AirPods Pro 3 vs. AirPods Pro 2: Price

So, there is one thing that’s the same on these two pairs of earbuds, and while that sounds like a point against the AirPods Pro 3, it’s actually a big win for Apple’s newest pair of AirPods. Both pairs debuted at $250, and while you can currently get the AirPods Pro 2 for $200, AirPods Pro 3 still qualify as a static entry price gen over gen. More for the same amount! Nice!

Source link
#AirPods #Pro #AirPods #Pro #Wireless #Earbuds


French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials.

France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users.

According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.”

Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health.

Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

“This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal.

X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.

#French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok">French Prosecutors Want Elon Musk and Linda Yaccarino to Face Preliminary Charges
                French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials. France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users. According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

 French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.” Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

 Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over 0 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to  million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

 Musk, who is currently worth 3 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health. Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

 “This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal. X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.      #French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok

Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.”

Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health.

Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

“This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal.

X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.

#French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok">French Prosecutors Want Elon Musk and Linda Yaccarino to Face Preliminary ChargesFrench Prosecutors Want Elon Musk and Linda Yaccarino to Face Preliminary Charges
                French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials. France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users. According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

 French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.” Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

 Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

 Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health. Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

 “This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal. X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.      #French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok

French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials.

France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users.

According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.”

Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health.

Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

“This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal.

X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.

#French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok

ransomware gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.

The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.

Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.

In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.

The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”

TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.

The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”

Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.

The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.

#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities">The Canvas Hack Is a New Kind of Ransomware DebacleHigher education has long been a target of ransomware gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities

gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.

The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.

Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.

In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.

The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”

TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.

The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”

Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.

The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.

#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities">The Canvas Hack Is a New Kind of Ransomware Debacle

Higher education has long been a target of ransomware gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.

The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.

Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.

In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.

The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”

TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.

The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”

Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.

The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.

#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities

Post Comment