Edmonds reframes Canvas as a trust failure as Microsoft credential lands

Three weeks after the Canvas breach, the post-mortem is moving from the firewall to the front office. Today: a fresh expert reading of what actually went wrong, Microsoft's free AI literacy credential going live, an op-ed that calls out the cognitive cost of letting AI do the thinking, and the AERO review due to land any day.

The Canvas breach was a trust failure, not a software one

Stacey Edmonds, CEO of Lively and the creator of The Cyber Safety Game, tells The Educator the Canvas intrusion succeeded because attackers posed as teachers and exploited weak onboarding. Patches will not fix that. She wants verification protocols for unusual requests, scenario-based training (not compliance modules), and a supply chain audit of every platform holding student data. The Educator, 20 May. Why this matters: schools that respond by tightening passwords and adding MFA will miss the threat. The next phishing wave uses real teacher names and real assignment context. If your incident response plan does not include "what we tell parents about which data was taken," you do not have one yet.

Microsoft's AI literacy credential for educators is live this month

Microsoft Elevate for Educators has rolled out its AI Literacy credential, built with ISTE and ASCD and aligned to the OECD and European Commission frameworks. Free for teachers and school leaders, with the Brisbane Catholic rollout (12,500 staff on Copilot, projected to reach 80,000 students) held up as the implementation case study. Microsoft Education blog. Why this matters: this is the first credential at scale that an Australian principal can point a staff meeting at and say "do this." It is not just training, it is recognition of skill, and the difference matters when you are trying to evidence AI literacy to a board. Worth a look before anyone in the building proposes a paid alternative.

A 30 billion dollar reminder that tools do not teach

Dr Ragnar Purje argues in The Educator that the US classroom digitisation push (roughly $30 billion between 2002 and 2024) did not lift student outcomes, and that Gen Z has gone backwards on literacy, numeracy and problem solving. His point: students who outsource thinking to AI build "zero skills and knowledge," and the neuroscience backs the intuition. The Educator, 22 May. Why this matters: not every push back on AI is a moral panic. The case for keeping friction in learning is becoming the more interesting half of the conversation, and any school that hands out tools without deciding where effort still has to live is on borrowed time. Pair this with the Microsoft credential above and you have the start of a coherent staff position.

The AERO governance review is due to report any day

KPMG's review of the Australian Education Research Organisation is scheduled to land this month, and the federal government has already flagged AERO will be folded into the new Teaching and Learning Commission with ACARA, AITSL and Education Services Australia. AERO. Why this matters: this is the body that issues "what works" guidance on classroom practice, including on AI and assessment. A structural shake up changes whose evidence reaches your staff room and whose research gets prioritised. Watch for who chairs the new commission. That single appointment will tell you whether evidence based practice gets the AI question taken seriously.

Closing note: Instructure CEO Steve Daly was due to brief the US House Homeland Security Committee by close of business yesterday on the Canvas intrusions. No public readout yet, which is itself a tell. Australian universities still on Canvas should assume an OAIC inquiry follows whatever Washington decides, not precedes it. More at Digital Attitudes tomorrow.