#AxisOfEasy Weekly Tech Digest

By Mark E. JeftovicSociety & Culture Documentary News Technology News Commentary Tech News

#AxisOfEasy Weekly Tech Digest episodes

August 28 #AxisOfEasy 465: DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate

In This Issue:
DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate
AI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them.
Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” Claim
DOJ Charges 17 More Iranians in a Decade-Long Campaign That Stole 31 Terabytes From 144 US Universities
OpenAI Hits the Brakes on Model Training After Its Own Agent Hacked Hugging Face

In This Issue:
DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate
AI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them.
Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” Claim
DOJ Charges 17 More Iranians in a Decade-Long Campaign That Stole 31 Terabytes From 144 US Universities
OpenAI Hits the Brakes on Model Training After Its Own Agent Hacked Hugging Face
20 min
August 21 #AxisOfEasy 464: Apple’s Spyware Pager Goes Off in 110 Countries
In this issue:
Apple’s Spyware Pager Goes Off in 110 Countries
A Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch Was Out Five Days
Nine Fortune 500 Names, Millions of Records: The Azure Credential Dump Nobody’s Calling a Breach
GeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s No Fix Yet
The March Supply-Chain Attack That Keeps Getting Bigger: LiteLLM’s 2,500-Company Hangover
In this issue:
Apple’s Spyware Pager Goes Off in 110 Countries
A Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch Was Out Five Days
Nine Fortune 500 Names, Millions of Records: The Azure Credential Dump Nobody’s Calling a Breach
GeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s No Fix Yet
The March Supply-Chain Attack That Keeps Getting Bigger: LiteLLM’s 2,500-Company Hangover
19 min
August 14 #AxisOfEasy 463: Facial Recognition Comes To The London Underground, Whether You Signed Up Or Not
Facial Recognition Comes to the London Underground, Whether You Signed Up or Not
Google’s Synced Passkeys Have a Master Key — And It Can’t Be Revoked
Metabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor Trust
Hackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT Network
North Carolina’s Ports Go Manual After a Cyberattack Nobody Wants to Talk About
Your Kid’s GPS Watch Was Built on the Same Three Leaky Backends As Everyone Else’s
Facial Recognition Comes to the London Underground, Whether You Signed Up or Not
Google’s Synced Passkeys Have a Master Key — And It Can’t Be Revoked
Metabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor Trust
Hackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT Network
North Carolina’s Ports Go Manual After a Cyberattack Nobody Wants to Talk About
Your Kid’s GPS Watch Was Built on the Same Three Leaky Backends As Everyone Else’s
12 min
August 07 #AxisOfEasy 462: Your “Private” Claude Chats Were On Google The Whole Time
In this issue:
The npm Worm That Ate The JavaScript Supply Chain
75 Million Revolut Records For Sale, Revolut Says Nothing To See Here
Your “Private” Claude Chats Were On Google The Whole Time
Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened
VMware’s vCenter Has A “Skip Authentication Entirely” Button Now
Brussels Starts Actually Enforcing The AI Act This Week
In this issue:
The npm Worm That Ate The JavaScript Supply Chain
75 Million Revolut Records For Sale, Revolut Says Nothing To See Here
Your “Private” Claude Chats Were On Google The Whole Time
Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened
VMware’s vCenter Has A “Skip Authentication Entirely” Button Now
Brussels Starts Actually Enforcing The AI Act This Week
13 min
July 31 #AxisOfEasy 461: In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode
In this issue:
In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode
FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations
Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts
Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads
OpenAI’s AI Models Exploited a Zero-Day to Breach Hugging Face
In this issue:
In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode
FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations
Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts
Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads
OpenAI’s AI Models Exploited a Zero-Day to Breach Hugging Face
19 min
July 24 #AxisOfEasy 460: AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident
In this issue:
AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident
Canada’s New Social Media Bill Would End Anonymous Sign-Ups
New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals
Suno, Paidwork Breaches Expose Nearly 80 Million Accounts
Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now
In this issue:
AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident
Canada’s New Social Media Bill Would End Anonymous Sign-Ups
New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals
Suno, Paidwork Breaches Expose Nearly 80 Million Accounts
Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now
24 min
July 17 #AxisOfEasy 459: UK Protects Teens From Midnight Scrolling, As Long As Teens Consent To Being Protected
In this issue:
UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected
Waymo Robotaxi Snitches on Teens’ Boozy Joyride
Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer
Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions
Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says
Spoofed OAuth IDs Let Hackers Quietly Test Millions of Microsoft Entra Logins
In this issue:
UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected
Waymo Robotaxi Snitches on Teens’ Boozy Joyride
Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer
Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions
Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says
Spoofed OAuth IDs Let Hackers Quietly Test Millions of Microsoft Entra Logins
18 min
July 10 #AxisOfEasy 458: Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts
In this issue:
Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts
Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs
GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data
North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign
New “Armored Likho” Threat Actor Targets Government and Energy Sectors with AI-Obfuscated Stealer
Have you checked out DomainHelp lately?
In this issue:
Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts
Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs
GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data
North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign
New “Armored Likho” Threat Actor Targets Government and Energy Sectors with AI-Obfuscated Stealer
Have you checked out DomainHelp lately?
19 min
July 03 #AxisOfEasy 457: Canada’s New Cyber Law Lets A Minister Cut Your Phone Off — No Warrant Required
In this issue:
Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired
CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw
NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day
Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff
New “ARToken” Phishing Service Exposed as Customer of MFA-Bypassing EvilTokens Kit
In this issue:
Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired
CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw
NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day
Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff
New “ARToken” Phishing Service Exposed as Customer of MFA-Bypassing EvilTokens Kit
16 min
June 26 #AxisOfEasy 456: House Leaders Strike Deal On KIDS Act—Minus Key Safety Provision
In this issue:
House Leaders Strike Deal on KIDS Act—Minus Key Safety Provision
Zombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link Devices
Klue Breach Traced to Forgotten 2022 Credential
Squidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked Passwords
New “Crypto Clipper” Worm Hijacks Crypto Wallets via USB Drives
In this issue:
House Leaders Strike Deal on KIDS Act—Minus Key Safety Provision
Zombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link Devices
Klue Breach Traced to Forgotten 2022 Credential
Squidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked Passwords
New “Crypto Clipper” Worm Hijacks Crypto Wallets via USB Drives
20 min