Instructure Canvas security incident
- Resolved · UTC
There are no known issues with Drieam apps and their integration connection with Canvas. All apps can be accessed securely from Canvas.
Institutions that have opted to unlink their Drieam Apps temporarily from their Canvas instance are welcome to contact support@drieam.com for assistance when re-establishing the integration(s).
- Monitoring · UTC
All Drieam app configurations that were relying on the availability of the URL https://canvas.instructure.com have been migrated. Access to these apps has therefore been restored. There are no known issues with Drieam apps and their integrations with Canvas.
We'll continue to monitor the situation at Instructure. Please refer to their central webpage for updates on the incident:
- Identified · UTC
Instructure has taken https://canvas.instructure.com/ offline, as it relates to the Free-For-Teacher attack vector that is being referred to on https://www.instructure.com/incident_update.
As this URL is being used for some of our Drieam LTI applications in some configurations, this might result in these apps being unavailable. We're currently working on resolving this by migrating these configurations to an alternative URL.
Next update: before 14.00 CEST - Investigating · UTC
We are working on guidance for institutions that use Instructure Canvas instances, after a new security incident (https://status.instructure.com/incidents/m88d7ymwpzpy) was reported in the last 24h.
At the moment, integrations of Drieam apps with Canvas instances are not disabled proactively. However, Instructure has placed https://canvas.instructure.com/ in maintenance mode, which blocks launching Drieam apps in some configurations, showing an "Canvas is currently undergoing maintenance" notice.
We expect to have guidance shared within the next hour.