#AxisOfEasy Weekly Tech Digest

In this issue:A Flock-Like Camera In Canada, Pointed At The Police Station — Then The Police VisitedFrench Supermarket Freezers Cranked To 50C — Hundreds Of Stores Affected, Fires ReportedAn OpenAI Engineer Was Arrested For Planting A Listening Device In A Conference RoomGitHub Tightens Npm Publishing After Flaw Left 1,500+ Packages Vulnerable To HijackingGhostscript Flaw Lets Attackers Hijack...

In this issue:Bitget Exchange Loses $387.5 Million After Attackers Exploit A Zero-Day In Security Software18 Months In Prison. Wrong Username.OpenInfra Europe’s JFrog Artifactory Breached — Anyone Who Pulled Packages Between August 28 and September 15 Should Assume CompromiseCISA Warns A Single Crafted Request Can Give Root On Exposed MikroTik RoutersMore Than Half A Million GitHub Credentials...

In this issue:Citrix’s NetScaler Zero-Days Were Exploited For Weeks Before Anyone PatchedApple Patches A Zero-Day Used In An “Extremely Sophisticated” Spyware-Style AttackA Pentagon Personnel Database Was Quietly Open For Nine MonthsAn AI Agent Broke Into A Vulnerability-Disclosure Nonprofit, And Was Bad At ItMark E. Jeftovic: What’s Really Behind The AI Panic In this issue:Citrix’s NetScaler...

https://youtu.be/LhHjgNFWLsoIn this issue:Google Confirms Gemini Broke Into Three Real Companies During A Security TestCisco Patches Two Actively Exploited Zero-Days In Two DaysMicrosoft Takes Down An AI-Powered Phishing Platform That Hit 12,000 AccountsIreland Fines Google $463 Million Over How It Handled Your Location HistoryA Maximum-Severity D-Link Router Bug Has No Patch And A Public...

In This Issue:A Compromised HBO Max Account Became A Malware StorefrontIran’s Spyware Playbook: Befriend You On WhatsApp, Then Own Your LaptopChinese Spies Turned Google’s Own Bug Fixes Into A Working ExploitGoogle Patches A Zero-Click Pixel Bug That Was Already Being Used On Real PhonesA Fake Government Email Got Revolut To Hand Over Passports And Bitcoin HistoriesIn This Issue:A Compromised HBO...

In this issue:Your LG TV Is Listening Even When It’s “Off”A Swarm Of OpenAI Agents Secretly Ran A German Wiki As Their Message Board For Three MonthsHackers Drain $320 Million From Liquid Network, Then Give Most Of It BackMicrosoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-DaysTrezor’s Address Breach Just Went Analog: Scam Letters With Malicious QR CodesAnthropic Employee...

In this issue:A dark-web service is selling scans of 153 million U.S. and Canadian driver’s licences, and the trail points at the vendor that scans IDs at rental counters and dispensaries.A cyberattack knocked out Boston Scientific’s order-and-shipping systems worldwide and delayed activation of new pacemaker home monitors.A perfect-storm JFrog Artifactory bug lets anyone mint an admin token, and...

In This Issue:DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the SenateAI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them.Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” ClaimDOJ Charges 17 More Iranians in a Decade-Long Campaign That Stole 31 Terabytes From 144 US UniversitiesOpenAI Hits the...

In this issue:Apple’s Spyware Pager Goes Off in 110 CountriesA Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch Was Out Five DaysNine Fortune 500 Names, Millions of Records: The Azure Credential Dump Nobody’s Calling a BreachGeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s No Fix YetThe March Supply-Chain Attack That Keeps Getting Bigger: LiteLLM’s...

Facial Recognition Comes to the London Underground, Whether You Signed Up or NotGoogle’s Synced Passkeys Have a Master Key — And It Can’t Be RevokedMetabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor TrustHackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT NetworkNorth Carolina’s Ports Go Manual After a Cyberattack Nobody Wants to Talk AboutYour...