#AxisOfEasy Weekly Tech Digest

In this issue:Apple Patches Actively Exploited Zero-Day Across DevicesMontreal Fake ID Lab Busted, Thousands of Identities StolenMicrosoft 365 Copilot Bug Summarizes Confidential EmailsU.S. Law Firm Sues Lenovo Over Data Transfers to China

In this issue:Discord Is Asking For Your ID. The Backlash Is About More Than PrivacyHackers Hijack Physician’s Paycheck in Social Engineering Payroll ScamSubstack Confirms Data Breach Exposing User Contact InformationCongress Targets Kids’ Social Media Use with New Federal RulesdYdX npm and PyPI Packages Compromised in Third Major AttackZeroDayRAT: New Commercial Spyware Threatens Android and iOS...

In this issue:OpenClaw and Moltbook: Inside the Rise of Autonomous AI AgentsState Hackers Hijack Notepad++ Updates in Months-Long Supply-Chain AttackSystemBC Malware Hits 10,000+ Global IPs, Targets Government SitesEight Minutes to Admin: AI-Assisted Cloud Attack Hits AWSCritical Looker Vulnerabilities Exposed by Tenable In this issue:OpenClaw and Moltbook: Inside the Rise of Autonomous AI...

In this issue:FBI Accesses Microsoft BitLocker Keys in Guam Fraud CaseOpen Source Supply Chains Under Attack: Malicious Packages SurgeCybercrime Alliance Hits 100+ Global Organisations with Vishing AttacksUS Seizes RAMP Cybercrime Forum, Disrupting Ransomware HubTikTok US Expands Data Access Under New Joint VentureIn this issue:FBI Accesses Microsoft BitLocker Keys in Guam Fraud CaseOpen Source...

In this issue:Ireland Moves to Expand Digital Surveillance PowersSenators Reintroduce KOSMA, Raising Age Verification and Privacy ConcernsNew Linux Malware Built by AI and One DeveloperGoogle Gemini AI Vulnerability Exposes Calendar DataTennessee Hacker Pleads Guilty to Breaching Supreme Court, AmeriCorps, and VA Systems In this issue:Ireland Moves to Expand Digital Surveillance PowersSenators...

In this issue:Australia Moves to Enact Sweeping New Hate Speech and Extremism LawsClaude Cowork Exfiltrates FilesCan x402 micropayments save Open Source Software?VoidLink: A Stealthy New Cloud Malware Targets Linux InfrastructureDeadLock Ransomware Exploits Blockchain to Evade DetectionMicrosoft and Law Enforcement Take Down RedVDS Cybercrime PlatformFortinet Patches Six Critical Vulnerabilities...

In this issue: Spotify Probes Alleged Massive Music Scrape and DRM CircumventionMongoBleed: Critical MongoDB Exploit Goes Public Over the HolidaysCalifornia Launches Nation’s Strictest Data Deletion LawApple Warns Users of Government Spyware AttacksCritical D-Link DSL Vulnerability Under Active ExploitationIn this issue: Spotify Probes Alleged Massive Music Scrape and DRM CircumventionMongoBleed:...

In this issue:UK moves toward mandatory phone surveillanceApple Permanently Disables Longtime Developer’s Account, Bricking DevicesPornHub Extorted After Historical Data Breach by ShinyHuntersRussian APT28 Targets Ukrainian Webmail in Credential-Theft CampaignCanadian Committee Votes to Remove Religious Speech ProtectionsIn this issue:UK moves toward mandatory phone surveillanceApple Permanently...

In this issue:Trump Administration Plans Mandatory Social Media and Family Data for Foreign VisitorsYet Another Cloudflare Outage (YATO)Conservative Party of Canada Faces Major Cybersecurity Breach Affecting Hundreds of CandidatesChinese Hackers Use BRICKSTORM Malware to Target Governments and Critical Technology SystemsResearchers Discover EtherRAT Malware Exploiting Critical React2Shell...

In this issue:Edmonton’s new police pilot brings facial recognition into officers’ line of sightMarquis Fintech Confirms Ransomware Attack That Exposed Data of Hundreds of Thousands of Bank CustomersReact and Next.js Servers Face Critical Remote Code Execution VulnerabilityIndia Orders Apple and Other Smartphone Makers to Preinstall Government Tracking App on All DevicesClickFix Attack Surges...