#AxisOfEasy Weekly Tech Digest

Mark E. Jeftovic
  • 5.0 (14)
  • Technology
  • Updated Biweekly

#AxisOfEasy is a weekly briefing wherein easyDNS CEO Mark E. Jeftovic sends out a short digest on the state of the ‘net and how it affects your business, security and privacy. Topics covered include cybersecurity, surveillance capitalism, censorship & free speech, data breaches and leaks, emerging technologies, decentralization and interesting subcultures.

Episodes

  1. 5d ago

    #AxisOfEasy 466: You Handed Over Your Licence At The Counter. Now 153 Million Scans Are For sale

    In this issue: A dark-web service is selling scans of 153 million U.S. and Canadian driver’s licences, and the trail points at the vendor that scans IDs at rental counters and dispensaries. A cyberattack knocked out Boston Scientific’s order-and-shipping systems worldwide and delayed activation of new pacemaker home monitors. A perfect-storm JFrog Artifactory bug lets anyone mint an admin token, and attackers were forging them within three days of the patch. Researchers spent $535.74 and eight and a half hours getting Claude to port a working exploit to an industrial controller — then it bricked the device. Two more surveillance backdoors turned up in Chinese-made routers sold worldwide under brand names the real manufacturer never prints on the box. In this issue: A dark-web service is selling scans of 153 million U.S. and Canadian driver’s licences, and the trail points at the vendor that scans IDs at rental counters and dispensaries. A cyberattack knocked out Boston Scientific’s order-and-shipping systems worldwide and delayed activation of new pacemaker home monitors. A perfect-storm JFrog Artifactory bug lets anyone mint an admin token, and attackers were forging them within three days of the patch. Researchers spent $535.74 and eight and a half hours getting Claude to port a working exploit to an industrial controller — then it bricked the device. Two more surveillance backdoors turned up in Chinese-made routers sold worldwide under brand names the real manufacturer never prints on the box.

  2. Aug 28

    #AxisOfEasy 465: DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate

    In This Issue: DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate AI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them. Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” Claim DOJ Charges 17 More Iranians in a Decade-Long Campaign That Stole 31 Terabytes From 144 US Universities OpenAI Hits the Brakes on Model Training After Its Own Agent Hacked Hugging Face   In This Issue: DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate AI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them. Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” Claim DOJ Charges 17 More Iranians in a Decade-Long Campaign That Stole 31 Terabytes From 144 US Universities OpenAI Hits the Brakes on Model Training After Its Own Agent Hacked Hugging Face

  3. Aug 21

    #AxisOfEasy 464: Apple's Spyware Pager Goes Off in 110 Countries

    In this issue: Apple’s Spyware Pager Goes Off in 110 Countries A Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch  Was Out Five Days Nine Fortune 500 Names, Millions of Records: The Azure Credential Dump  Nobody’s Calling a Breach GeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s  No Fix Yet The March Supply-Chain Attack That Keeps Getting Bigger: LiteLLM’s  2,500-Company Hangover In this issue: Apple’s Spyware Pager Goes Off in 110 Countries A Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch  Was Out Five Days Nine Fortune 500 Names, Millions of Records: The Azure Credential Dump  Nobody’s Calling a Breach GeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s  No Fix Yet The March Supply-Chain Attack That Keeps Getting Bigger: LiteLLM’s  2,500-Company Hangover

  4. Aug 14

    #AxisOfEasy 463: Facial Recognition Comes To The London Underground, Whether You Signed Up Or Not

    Facial Recognition Comes to the London Underground, Whether You Signed  Up or Not Google’s Synced Passkeys Have a Master Key — And It Can’t Be Revoked Metabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor Trust Hackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT Network North Carolina’s Ports Go Manual After a Cyberattack Nobody Wants to Talk About Your Kid’s GPS Watch Was Built on the Same Three Leaky Backends As Everyone Else’s Facial Recognition Comes to the London Underground, Whether You Signed  Up or Not Google’s Synced Passkeys Have a Master Key — And It Can’t Be Revoked Metabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor Trust Hackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT Network North Carolina’s Ports Go Manual After a Cyberattack Nobody Wants to Talk About Your Kid’s GPS Watch Was Built on the Same Three Leaky Backends As Everyone Else’s

  5. Aug 7

    #AxisOfEasy 462: Your "Private" Claude Chats Were On Google The Whole Time

    In this issue: The npm Worm That Ate The JavaScript Supply Chain 75 Million Revolut Records For Sale, Revolut Says Nothing To See Here Your “Private” Claude Chats Were On Google The Whole Time Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened VMware’s vCenter Has A “Skip Authentication Entirely” Button Now Brussels Starts Actually Enforcing The AI Act This Week In this issue: The npm Worm That Ate The JavaScript Supply Chain 75 Million Revolut Records For Sale, Revolut Says Nothing To See Here Your “Private” Claude Chats Were On Google The Whole Time Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened VMware’s vCenter Has A “Skip Authentication Entirely” Button Now Brussels Starts Actually Enforcing The AI Act This Week

  6. Jul 31 ·  Video

    #AxisOfEasy 461: In First-of-Its-Kind Case, Atlanta Man Charged Over Phone's Self-Wiping Passcode

    In this issue: In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads OpenAI’s AI Models Exploited a Zero-Day to Breach Hugging Face In this issue: In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads OpenAI’s AI Models Exploited a Zero-Day to Breach Hugging Face

  7. Jul 24

    #AxisOfEasy 460: AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident

    In this issue: AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident Canada’s New Social Media Bill Would End Anonymous Sign-Ups New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals Suno, Paidwork Breaches Expose Nearly 80 Million Accounts Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now In this issue: AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident Canada’s New Social Media Bill Would End Anonymous Sign-Ups New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals Suno, Paidwork Breaches Expose Nearly 80 Million Accounts Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now

  8. Jul 17

    #AxisOfEasy 459: UK Protects Teens From Midnight Scrolling, As Long As Teens Consent To Being Protected

    In this issue: UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected Waymo Robotaxi Snitches on Teens’ Boozy Joyride Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says Spoofed OAuth IDs Let Hackers Quietly Test Millions of Microsoft Entra Logins In this issue: UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected Waymo Robotaxi Snitches on Teens’ Boozy Joyride Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says Spoofed OAuth IDs Let Hackers Quietly Test Millions of Microsoft Entra Logins

  9. Jul 10

    #AxisOfEasy 458: Ottawa Weighed Suing Citizens Over "Misleading" Social Media Posts

    In this issue: Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign New “Armored Likho” Threat Actor Targets Government and Energy Sectors with AI-Obfuscated Stealer Have you checked out DomainHelp lately? In this issue: Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign New “Armored Likho” Threat Actor Targets Government and Energy Sectors with AI-Obfuscated Stealer Have you checked out DomainHelp lately?

  10. Jul 3 ·  Video

    #AxisOfEasy 457: Canada's New Cyber Law Lets A Minister Cut Your Phone Off — No Warrant Required

    In this issue: Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff New “ARToken” Phishing Service Exposed as Customer of MFA-Bypassing EvilTokens Kit In this issue: Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff New “ARToken” Phishing Service Exposed as Customer of MFA-Bypassing EvilTokens Kit

  • 10 Episodes

5
out of 5
14 Ratings

About

#AxisOfEasy is a weekly briefing wherein easyDNS CEO Mark E. Jeftovic sends out a short digest on the state of the ‘net and how it affects your business, security and privacy. Topics covered include cybersecurity, surveillance capitalism, censorship & free speech, data breaches and leaks, emerging technologies, decentralization and interesting subcultures.

Information

You Might Also Like