#AxisOfEasy Weekly Tech Digest

By Mark E. JeftovicSociety & Culture Documentary News Technology News Commentary Tech News

#AxisOfEasy Weekly Tech Digest episodes

June 19 #AxisOfEasy 455: Canada’s New Bill Would Trade Online Anonymity For “Child Safety”
In this issue:
Canada’s New Bill Would Trade Online Anonymity for “Child Safety”
US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak Claim
Massive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other Domains
AI Sovereignty Fears Boil Over at G7
The Backdoor That Outlived the Takedown
In this issue:
Canada’s New Bill Would Trade Online Anonymity for “Child Safety”
US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak Claim
Massive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other Domains
AI Sovereignty Fears Boil Over at G7
The Backdoor That Outlived the Takedown
24 min
June 12 #AxisOfEasy 454: Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber Defenders
In this issue:
Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber Defenders
Disgruntled Ex-Microsoft Researcher Drops Seventh Zero-Day, Targets Defender
Meta Bug Exposes 20,000+ Instagram Accounts
Vidar Malware Spreads Via Fake Tutorial Videos on TikTok and Instagram
Red Hat npm Packages Backdoored in GitHub Account Compromise
In this issue:
Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber Defenders
Disgruntled Ex-Microsoft Researcher Drops Seventh Zero-Day, Targets Defender
Meta Bug Exposes 20,000+ Instagram Accounts
Vidar Malware Spreads Via Fake Tutorial Videos on TikTok and Instagram
Red Hat npm Packages Backdoored in GitHub Account Compromise
19 min
June 05 #AxisOfEasy 453: Instagram’s AI Chatbot Exploited to Hijack High-Profile Accounts
In this issue:
Instagram’s AI Chatbot Exploited to Hijack High-Profile Accounts
Red Hat npm Channel Hijacked to Spread Credential-Stealing Worm
AI-Powered Malware Lab Targets Major EDR Platforms
IMA Diligence Services Data Breach Exposes 525,000+ Victims to Genesis Ransomware Group
Microsoft Backs Down After Security Researcher Backlash
In this issue:
Instagram’s AI Chatbot Exploited to Hijack High-Profile Accounts
Red Hat npm Channel Hijacked to Spread Credential-Stealing Worm
AI-Powered Malware Lab Targets Major EDR Platforms
IMA Diligence Services Data Breach Exposes 525,000+ Victims to Genesis Ransomware Group
Microsoft Backs Down After Security Researcher Backlash
15 min
May 29 #AxisOfEasy 452: Canada’s Bill C-22 Draws Global Tech Backlash Over Surveillance Demands
In this issue:
Canada’s Bill C-22 Draws Global Tech Backlash Over Surveillance Demands
Microsoft’s Email System Exploited for Months in Phishing Campaign
Texas AG Sues Meta Over WhatsApp Encryption Claims — But Experts Are Skeptical
AI-Generated npm Malware Targets Claude Users, Exposes Itself With Rookie Mistake
7-Eleven Data Breach Exposes 185,000 Customers’ Personal Information
GPG Email Forwarding Returns, Because Plaintext Was Apparently a Bad Idea
In this issue:
Canada’s Bill C-22 Draws Global Tech Backlash Over Surveillance Demands
Microsoft’s Email System Exploited for Months in Phishing Campaign
Texas AG Sues Meta Over WhatsApp Encryption Claims — But Experts Are Skeptical
AI-Generated npm Malware Targets Claude Users, Exposes Itself With Rookie Mistake
7-Eleven Data Breach Exposes 185,000 Customers’ Personal Information
GPG Email Forwarding Returns, Because Plaintext Was Apparently a Bad Idea
19 min
May 22 #AxisOfEasy 451: Ontario Police Secretly Used Israeli Spyware, Watchdog Finds
In this issue:
Ontario Police Secretly Used Israeli Spyware, Watchdog Finds
Microsoft Dismantles Fox Tempest, a Ransomware-Enabling Code-Signing Operation
Canada Promotes VPNs While Passing a Law to Kill Them
GitHub Breached: 4,000 Private Repos Stolen via Poisoned VS Code Extension
CISA Contractor Exposes Federal Cloud Credentials on Public GitHub for Six Months
In this issue:
Ontario Police Secretly Used Israeli Spyware, Watchdog Finds
Microsoft Dismantles Fox Tempest, a Ransomware-Enabling Code-Signing Operation
Canada Promotes VPNs While Passing a Law to Kill Them
GitHub Breached: 4,000 Private Repos Stolen via Poisoned VS Code Extension
CISA Contractor Exposes Federal Cloud Credentials on Public GitHub for Six Months
22 min
May 15 #AxisOfEasy 450: Foxconn Hit by Nitrogen Ransomware, 8 TB of Client Data Stolen
https://youtu.be/PXQltgWpBok
In this issue:
Bill C-22 Outcry Grows LouderFoxconn Hit by Nitrogen Ransomware, 8 TB of Client Data Stolen
ShinyHunters Goes Dark After Serbian Registry Suspends Clearnet Domain
npm Worm Hits 518M-Download Packages with Self-Destructing Malware
DHS Used a 1930 Customs Law to Unmask a Canadian Critic. The ACLU Is Fighting Back
Fake Claude Code Installer Caught Stealing Developer Credentials
https://youtu.be/PXQltgWpBok
In this issue:
Bill C-22 Outcry Grows LouderFoxconn Hit by Nitrogen Ransomware, 8 TB of Client Data Stolen
ShinyHunters Goes Dark After Serbian Registry Suspends Clearnet Domain
npm Worm Hits 518M-Download Packages with Self-Destructing Malware
DHS Used a 1930 Customs Law to Unmask a Canadian Critic. The ACLU Is Fighting Back
Fake Claude Code Installer Caught Stealing Developer Credentials
22 min
May 08 #AxisOfEasy 449: Canada’s Parliament Is Filing Your Posts About Politicians
In this issue:
Canada’s Parliament Is Filing Your Posts About Politicians
Backdoor Found in Daemon Tools Targets Thousands of Windows Users
Linux Kernel “CopyFail” Flaw Under Active Attack — Federal Patch Deadline Set
Pro-Iranian Group DDoS Attack Cripples Ubuntu and Canonical During Critical Security Crisis
Utah Becomes First U.S. State to Target VPNs in Age Verification Law
In this issue:
Canada’s Parliament Is Filing Your Posts About Politicians
Backdoor Found in Daemon Tools Targets Thousands of Windows Users
Linux Kernel “CopyFail” Flaw Under Active Attack — Federal Patch Deadline Set
Pro-Iranian Group DDoS Attack Cripples Ubuntu and Canonical During Critical Security Crisis
Utah Becomes First U.S. State to Target VPNs in Age Verification Law
18 min
April 30 #AxisOfEasy 448: Toronto Police Bust Canada’s First SMS Blaster Cybercrime Operation
In this issue:
Toronto Police Bust Canada’s First SMS Blaster Cybercrime Operation
CrowdStrike Patches Critical LogScale Vulnerability Allowing Unauthenticated File Access
Vercel Breach Traced to Roblox-Seeking “Patient Zero” at Context.ai
North Korean Hackers Target 100+ Crypto Firms in Sophisticated Global Phishing Campaign
ShinyHunters Leaks Data from Zara, 7-Eleven, and Udemy in Salesforce-Linked Campaign
In this issue:
Toronto Police Bust Canada’s First SMS Blaster Cybercrime Operation
CrowdStrike Patches Critical LogScale Vulnerability Allowing Unauthenticated File Access
Vercel Breach Traced to Roblox-Seeking “Patient Zero” at Context.ai
North Korean Hackers Target 100+ Crypto Firms in Sophisticated Global Phishing Campaign
ShinyHunters Leaks Data from Zara, 7-Eleven, and Udemy in Salesforce-Linked Campaign
16 min
April 24 #AxisOfEasy 447: Unauthorized Group Accesses Anthropic’s Mythos Security Tool
In this issue:
Unauthorized Group Accesses Anthropic’s Mythos Security Tool
Vercel Breached via Compromised Google Workspace OAuth App
Canada’s Liberals Move to Revive Online Speech Legislation
Crypto Scam Targets Shipping Chaos in Strait of Hormuz
Mastodon and Bluesky Hit by DDoS Attacks in Rapid Succession
Ethereum gateway domain hijacked on our watch
In this issue:
Unauthorized Group Accesses Anthropic’s Mythos Security Tool
Vercel Breached via Compromised Google Workspace OAuth App
Canada’s Liberals Move to Revive Online Speech Legislation
Crypto Scam Targets Shipping Chaos in Strait of Hormuz
Mastodon and Bluesky Hit by DDoS Attacks in Rapid Succession
Ethereum gateway domain hijacked on our watch
20 min
April 17 #AxisOfEasy 446: Internet Content Regulation Is Coming To Canada
In this issue:
Internet Content Regulation is Coming To Canada
Court Orders OpenAI to Block User in ChatGPT Case Raising Free Speech Concerns
Fake Claude “Pro” Site Spreads PlugX Malware via DLL Sideloading
n8n Abuse Turns Workflow Automation Tool into Phishing and Malware Delivery Channel
AI Agents in GitHub Actions Bypassed via Prompt Injection
Fake Microsoft Update Campaign Drops Stealth Infostealer via Electron and Python Chain
In this issue:
Internet Content Regulation is Coming To Canada
Court Orders OpenAI to Block User in ChatGPT Case Raising Free Speech Concerns
Fake Claude “Pro” Site Spreads PlugX Malware via DLL Sideloading
n8n Abuse Turns Workflow Automation Tool into Phishing and Malware Delivery Channel
AI Agents in GitHub Actions Bypassed via Prompt Injection
Fake Microsoft Update Campaign Drops Stealth Infostealer via Electron and Python Chain
22 min