#AxisOfEasy Weekly

In this issue: A Flock-Like Camera In Canada, Pointed At The Police Station — Then The Police Visited French Supermarket Freezers Cranked To 50C — Hundreds Of Stores Affected, Fires Reported An OpenAI Engineer Was Arrested For Planting A Listening Device In A Conference Room GitHub Tightens Npm Publishing After Flaw Left 1,500+ Packages Vulnerable […]

In this issue: Bitget Exchange Loses $387.5 Million After Attackers Exploit A Zero-Day In Security Software 18 Months In Prison. Wrong Username. OpenInfra Europe’s JFrog Artifactory Breached — Anyone Who Pulled Packages Between August 28 and September 15 Should Assume Compromise CISA Warns A Single Crafted Request Can Give Root On Exposed MikroTik Routers More […]

  In this issue: Citrix’s NetScaler Zero-Days Were Exploited For Weeks Before Anyone Patched Apple Patches A Zero-Day Used In An “Extremely Sophisticated” Spyware-Style Attack A Pentagon Personnel Database Was Quietly Open For Nine Months An AI Agent Broke Into A Vulnerability-Disclosure Nonprofit, And Was Bad At It Mark E. Jeftovic: What’s Really Behind The […]

https://youtu.be/LhHjgNFWLso In this issue: Google Confirms Gemini Broke Into Three Real Companies During A Security Test Cisco Patches Two Actively Exploited Zero-Days In Two Days Microsoft Takes Down An AI-Powered Phishing Platform That Hit 12,000 Accounts Ireland Fines Google $463 Million Over How It Handled Your Location History A Maximum-Severity D-Link Router Bug Has No […]

In This Issue: A Compromised HBO Max Account Became A Malware Storefront Iran’s Spyware Playbook: Befriend You On WhatsApp, Then Own Your Laptop Chinese Spies Turned Google’s Own Bug Fixes Into A Working Exploit Google Patches A Zero-Click Pixel Bug That Was Already Being Used On Real Phones A Fake Government Email Got Revolut To […]

In this issue: Your LG TV Is Listening Even When It’s “Off” A Swarm Of OpenAI Agents Secretly Ran A German Wiki As Their Message Board For Three Months Hackers Drain $320 Million From Liquid Network, Then Give Most Of It Back Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days Trezor’s Address Breach Just […]

In this issue: A dark-web service is selling scans of 153 million U.S. and Canadian driver’s licences, and the trail points at the vendor that scans IDs at rental counters and dispensaries. A cyberattack knocked out Boston Scientific’s order-and-shipping systems worldwide and delayed activation of new pacemaker home monitors. A perfect-storm JFrog Artifactory bug lets […]

  In This Issue: DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate AI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them. Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” Claim DOJ Charges 17 More Iranians in a Decade-Long Campaign That […]

In this issue: Apple’s Spyware Pager Goes Off in 110 Countries A Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch  Was Out Five Days Nine Fortune 500 Names, Millions of Records: The Azure Credential Dump  Nobody’s Calling a Breach GeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s  No Fix Yet […]

Facial Recognition Comes to the London Underground, Whether You Signed  Up or Not Google’s Synced Passkeys Have a Master Key — And It Can’t Be Revoked Metabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor Trust Hackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT Network North Carolina’s Ports […]

In this issue: The npm Worm That Ate The JavaScript Supply Chain 75 Million Revolut Records For Sale, Revolut Says Nothing To See Here Your “Private” Claude Chats Were On Google The Whole Time Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened VMware’s vCenter Has A “Skip Authentication Entirely” Button Now Brussels Starts Actually […...

In this issue: In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads OpenAI’s AI Models Exploited a Zero-Day to Breac...

In this issue: AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident Canada’s New Social Media Bill Would End Anonymous Sign-Ups New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals Suno, Paidwork Breaches Expose Nearly 80 Million Accounts Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now In this […]

In this issue: Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign New “Armored Likho” Threat Actor Targe...

In this issue: Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff New “ARToken” Phishing Service Exposed as Customer of MFA-B...

In this issue: House Leaders Strike Deal on KIDS Act—Minus Key Safety Provision Zombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link Devices Klue Breach Traced to Forgotten 2022 Credential Squidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked Passwords New “Crypto Clipper” Worm Hijacks Crypto Wallets via USB Drives In this issue: House Leaders Strike Deal […]

In this issue: Canada’s New Bill Would Trade Online Anonymity for “Child Safety” US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak Claim Massive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other Domains AI Sovereignty Fears Boil Over at G7 The Backdoor That Outlived the Takedown In this […]

In this issue: Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber Defenders Disgruntled Ex-Microsoft Researcher Drops Seventh Zero-Day, Targets Defender Meta Bug Exposes 20,000+ Instagram Accounts Vidar Malware Spreads Via Fake Tutorial Videos on TikTok and Instagram Red Hat npm Packages Backdoored in GitHub Account Compromise In […]

In this issue: Instagram’s AI Chatbot Exploited to Hijack High-Profile Accounts Red Hat npm Channel Hijacked to Spread Credential-Stealing Worm AI-Powered Malware Lab Targets Major EDR Platforms IMA Diligence Services Data Breach Exposes 525,000+ Victims to Genesis Ransomware Group Microsoft Backs Down After Security Researcher Backlash In this issue: Instagram’s AI Chatbot Exploited t...

In this issue: Canada’s Bill C-22 Draws Global Tech Backlash Over Surveillance Demands Microsoft’s Email System Exploited for Months in Phishing Campaign Texas AG Sues Meta Over WhatsApp Encryption Claims — But Experts Are Skeptical AI-Generated npm Malware Targets Claude Users, Exposes Itself With Rookie Mistake 7-Eleven Data Breach Exposes 185,000 Customers’ Personal Informatio...

In this issue: Ontario Police Secretly Used Israeli Spyware, Watchdog Finds Microsoft Dismantles Fox Tempest, a Ransomware-Enabling Code-Signing Operation Canada Promotes VPNs While Passing a Law to Kill Them GitHub Breached: 4,000 Private Repos Stolen via Poisoned VS Code Extension CISA Contractor Exposes Federal Cloud Credentials on Public GitHub for Six Months In this issue: […]

https://youtu.be/PXQltgWpBok In this issue: Bill C-22 Outcry Grows LouderFoxconn Hit by Nitrogen Ransomware, 8 TB of Client Data Stolen ShinyHunters Goes Dark After Serbian Registry Suspends Clearnet Domain npm Worm Hits 518M-Download Packages with Self-Destructing Malware DHS Used a 1930 Customs Law to Unmask a Canadian Critic. The ACLU Is Fighting Back Fake Claude Code […]

In this issue: Canada’s Parliament Is Filing Your Posts About Politicians Backdoor Found in Daemon Tools Targets Thousands of Windows Users Linux Kernel “CopyFail” Flaw Under Active Attack — Federal Patch Deadline Set Pro-Iranian Group DDoS Attack Cripples Ubuntu and Canonical During Critical Security Crisis Utah Becomes First U.S. State to Target VPNs in Age […]