#AxisOfEasy Weekly Tech Digest

In this issue:Apple’s Spyware Pager Goes Off in 110 CountriesA Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch Was Out Five DaysNine Fortune 500 Names, Millions of Records: The Azure Credential Dump Nobody’s Calling a BreachGeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s No Fix YetThe March Supply-Chain Attack That Keeps Getting Bigger: LiteLLM’s...

Facial Recognition Comes to the London Underground, Whether You Signed Up or NotGoogle’s Synced Passkeys Have a Master Key — And It Can’t Be RevokedMetabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor TrustHackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT NetworkNorth Carolina’s Ports Go Manual After a Cyberattack Nobody Wants to Talk AboutYour...

In this issue:The npm Worm That Ate The JavaScript Supply Chain75 Million Revolut Records For Sale, Revolut Says Nothing To See HereYour “Private” Claude Chats Were On Google The Whole TimeCisco’s Firewall Manager Had Hard-Coded Credentials, Guess What HappenedVMware’s vCenter Has A “Skip Authentication Entirely” Button NowBrussels Starts Actually Enforcing The AI Act This WeekIn this issue:The...

In this issue:AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security IncidentCanada’s New Social Media Bill Would End Anonymous Sign-UpsNew Windows Malware “Dolphin X” Uses AI to Rank Victims for CybercriminalsSuno, Paidwork Breaches Expose Nearly 80 Million AccountsUbuntu Flaw Lets Local Users Seize Root Access — Patch NowIn this issue:AI Agent Breaches Hugging Face...

In this issue:UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being ProtectedWaymo Robotaxi Snitches on Teens’ Boozy JoyrideApple Sues OpenAI Over Alleged Trade Secret Theft by Former EngineerResearchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” MentionsRansomware Group’s Bosch Data Claims Appear Unfounded, Synopsys SaysSpoofed OAuth IDs Let Hackers...

In this issue:Ottawa Weighed Suing Citizens Over “Misleading” Social Media PostsCanada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware GangsGitHub AI Agents Can Be Tricked Into Leaking Private Repo DataNorth Korean Hackers Hit Open Source Supply Chain in “PolinRider” CampaignNew “Armored Likho” Threat Actor Targets Government and Energy Sectors with...

In this issue:House Leaders Strike Deal on KIDS Act—Minus Key Safety ProvisionZombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link DevicesKlue Breach Traced to Forgotten 2022 CredentialSquidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked PasswordsNew “Crypto Clipper” Worm Hijacks Crypto Wallets via USB DrivesIn this issue:House Leaders Strike Deal on KIDS Act—Minus Key Safety...

In this issue:Canada’s New Bill Would Trade Online Anonymity for “Child Safety”US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak ClaimMassive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other DomainsAI Sovereignty Fears Boil Over at G7The Backdoor That Outlived the TakedownIn this issue:Canada’s New Bill Would Trade Online Anonymity for...