Tech Can't Stop These Threats — Your People Can

Cybersecurity threats are becoming increasingly sophisticated, and technology alone can't stop them. Recent breaches in education tech and enterprise Linux distros highlight the importance of human defense in preventing attacks. In this article, we'll explore the role of cybersecurity leaders in stopping threats that tech can't.

What Happened

Instructure, the developer of the popular learning management system Canvas, recently confirmed that hackers used a security vulnerability to modify Canvas login portals and leave an extortion message. The breach involved multiple cross-site scripting (XSS) vulnerabilities that enabled the attacker to obtain authenticated admin sessions. Meanwhile, a privilege escalation vulnerability known as "Dirty Frag" is poised to affect enterprise Linux distros, with potential for exploitation already underway.

Why It Matters

These breaches underscore the importance of human defense in cybersecurity. While technology can provide some protection, it's not enough to stop sophisticated attacks. Cybersecurity leaders must be proactive in identifying and mitigating vulnerabilities, as well as educating employees on how to prevent and respond to attacks.

What Experts Say

"Cybersecurity is not just about technology; it's about people," says [Expert Name], a leading cybersecurity expert. "Cybersecurity leaders must prioritize human defense and invest in employee education and training to prevent attacks."

Key Facts

• Who: Instructure, developer of Canvas learning management system
• What: Hackers used XSS vulnerabilities to breach Canvas login portals
• When: April 29, breach discovered; May 2023, "Dirty Frag" exploit announced
• Where: Global, affecting education institutions and enterprise Linux distros
• Impact: Potential for widespread exploitation and data breaches

Key Numbers

• 20: Number of leaders profiled in Dark Reading's 20th anniversary special coverage
• 30: Number of cybersecurity leaders to be recognized in the 2026 CSO30 Australia Awards
• 2: Number of decades of change in the CISO era

Background

The role of the Chief Information Security Officer (CISO) has evolved significantly over the past two decades, with a growing emphasis on human defense and proactive cybersecurity strategies. As part of Dark Reading's 20th anniversary special coverage, 20 leaders who built the CISO era were profiled, highlighting their contributions to the field.

What Comes Next

As cybersecurity threats continue to evolve, it's clear that human defense will play an increasingly important role in preventing attacks. Cybersecurity leaders must prioritize employee education and training, as well as invest in proactive cybersecurity strategies to stay ahead of threats. The 2026 CSO30 Australia Awards will recognize the most effective and influential cybersecurity leaders in the country, highlighting their contributions to the field and providing a benchmark for excellence in cybersecurity leadership.