#AxisOfEasy Weekly Tech Digest

In this issue:AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security IncidentCanada’s New Social Media Bill Would End Anonymous Sign-UpsNew Windows Malware “Dolphin X” Uses AI to Rank Victims for CybercriminalsSuno, Paidwork Breaches Expose Nearly 80 Million AccountsUbuntu Flaw Lets Local Users Seize Root Access — Patch NowIn this issue:AI Agent Breaches Hugging Face...

In this issue:UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being ProtectedWaymo Robotaxi Snitches on Teens’ Boozy JoyrideApple Sues OpenAI Over Alleged Trade Secret Theft by Former EngineerResearchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” MentionsRansomware Group’s Bosch Data Claims Appear Unfounded, Synopsys SaysSpoofed OAuth IDs Let Hackers...

In this issue:Ottawa Weighed Suing Citizens Over “Misleading” Social Media PostsCanada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware GangsGitHub AI Agents Can Be Tricked Into Leaking Private Repo DataNorth Korean Hackers Hit Open Source Supply Chain in “PolinRider” CampaignNew “Armored Likho” Threat Actor Targets Government and Energy Sectors with...

In this issue:House Leaders Strike Deal on KIDS Act—Minus Key Safety ProvisionZombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link DevicesKlue Breach Traced to Forgotten 2022 CredentialSquidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked PasswordsNew “Crypto Clipper” Worm Hijacks Crypto Wallets via USB DrivesIn this issue:House Leaders Strike Deal on KIDS Act—Minus Key Safety...

In this issue:Canada’s New Bill Would Trade Online Anonymity for “Child Safety”US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak ClaimMassive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other DomainsAI Sovereignty Fears Boil Over at G7The Backdoor That Outlived the TakedownIn this issue:Canada’s New Bill Would Trade Online Anonymity for...

In this issue:Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber DefendersDisgruntled Ex-Microsoft Researcher Drops Seventh Zero-Day, Targets DefenderMeta Bug Exposes 20,000+ Instagram AccountsVidar Malware Spreads Via Fake Tutorial Videos on TikTok and InstagramRed Hat npm Packages Backdoored in GitHub Account CompromiseIn this issue:Anthropic Splits Its Most...

In this issue:Instagram’s AI Chatbot Exploited to Hijack High-Profile AccountsRed Hat npm Channel Hijacked to Spread Credential-Stealing WormAI-Powered Malware Lab Targets Major EDR PlatformsIMA Diligence Services Data Breach Exposes 525,000+ Victims to Genesis Ransomware GroupMicrosoft Backs Down After Security Researcher BacklashIn this issue:Instagram’s AI Chatbot Exploited to Hijack...

In this issue:Canada’s Bill C-22 Draws Global Tech Backlash Over Surveillance DemandsMicrosoft’s Email System Exploited for Months in Phishing CampaignTexas AG Sues Meta Over WhatsApp Encryption Claims — But Experts Are SkepticalAI-Generated npm Malware Targets Claude Users, Exposes Itself With Rookie Mistake7-Eleven Data Breach Exposes 185,000 Customers’ Personal InformationGPG Email Forwarding...

In this issue:Ontario Police Secretly Used Israeli Spyware, Watchdog FindsMicrosoft Dismantles Fox Tempest, a Ransomware-Enabling Code-Signing OperationCanada Promotes VPNs While Passing a Law to Kill ThemGitHub Breached: 4,000 Private Repos Stolen via Poisoned VS Code ExtensionCISA Contractor Exposes Federal Cloud Credentials on Public GitHub for Six MonthsIn this issue:Ontario Police Secretly...