#AxisOfEasy Weekly Tech Digest

In this issue:Canada’s Bill C-22 Draws Global Tech Backlash Over Surveillance DemandsMicrosoft’s Email System Exploited for Months in Phishing CampaignTexas AG Sues Meta Over WhatsApp Encryption Claims — But Experts Are SkepticalAI-Generated npm Malware Targets Claude Users, Exposes Itself With Rookie Mistake7-Eleven Data Breach Exposes 185,000 Customers’ Personal InformationGPG Email Forwarding...

In this issue:Ontario Police Secretly Used Israeli Spyware, Watchdog FindsMicrosoft Dismantles Fox Tempest, a Ransomware-Enabling Code-Signing OperationCanada Promotes VPNs While Passing a Law to Kill ThemGitHub Breached: 4,000 Private Repos Stolen via Poisoned VS Code ExtensionCISA Contractor Exposes Federal Cloud Credentials on Public GitHub for Six MonthsIn this issue:Ontario Police Secretly...

https://youtu.be/PXQltgWpBokIn this issue:Bill C-22 Outcry Grows LouderFoxconn Hit by Nitrogen Ransomware, 8 TB of Client Data StolenShinyHunters Goes Dark After Serbian Registry Suspends Clearnet Domainnpm Worm Hits 518M-Download Packages with Self-Destructing MalwareDHS Used a 1930 Customs Law to Unmask a Canadian Critic. The ACLU Is Fighting BackFake Claude Code Installer Caught Stealing...

In this issue:Canada’s Parliament Is Filing Your Posts About PoliticiansBackdoor Found in Daemon Tools Targets Thousands of Windows UsersLinux Kernel “CopyFail” Flaw Under Active Attack — Federal Patch Deadline SetPro-Iranian Group DDoS Attack Cripples Ubuntu and Canonical During Critical Security CrisisUtah Becomes First U.S. State to Target VPNs in Age Verification LawIn this issue:Canada’s...

In this issue:Toronto Police Bust Canada’s First SMS Blaster Cybercrime OperationCrowdStrike Patches Critical LogScale Vulnerability Allowing Unauthenticated File AccessVercel Breach Traced to Roblox-Seeking “Patient Zero” at Context.aiNorth Korean Hackers Target 100+ Crypto Firms in Sophisticated Global Phishing CampaignShinyHunters Leaks Data from Zara, 7-Eleven, and Udemy in Salesforce-Linked...

In this issue:Unauthorized Group Accesses Anthropic’s Mythos Security ToolVercel Breached via Compromised Google Workspace OAuth AppCanada’s Liberals Move to Revive Online Speech LegislationCrypto Scam Targets Shipping Chaos in Strait of HormuzMastodon and Bluesky Hit by DDoS Attacks in Rapid SuccessionEthereum gateway domain hijacked on our watchIn this issue:Unauthorized Group Accesses...

In this issue:Internet Content Regulation is Coming To CanadaCourt Orders OpenAI to Block User in ChatGPT Case Raising Free Speech ConcernsFake Claude “Pro” Site Spreads PlugX Malware via DLL Sideloadingn8n Abuse Turns Workflow Automation Tool into Phishing and Malware Delivery ChannelAI Agents in GitHub Actions Bypassed via Prompt InjectionFake Microsoft Update Campaign Drops Stealth Infostealer...

In this issue:Project Glasswing: Industry Coalition Uses AI to StrengthenCybersecurityAlberta Bill 23 Targets Political Deepfakes, Expands Petition LimitsLinkedIn Faces Legal Action Over Covert Browser ScansAI Agent Banned from Wikipedia Sparks ControversyHack-for-Hire Campaign Targets Journalists and Officials in Middle East In this issue:Project Glasswing: Industry Coalition Uses AI to...

In This Issue:Age Verification Laws Reshape the InternetAnthropic’s Claude Code Source Leaked AgainAxios Supply Chain Attack Exposes Malicious NPM DependencyCopilot Injects Ads Into Pull Requests as AI’s Subsidy Era EndsDutch Finance Ministry Cyberattack Disrupts Treasury Portal for 1,600 Public InstitutionsIn This Issue:Age Verification Laws Reshape the InternetAnthropic’s Claude Code Source...

In this issue:Apple Becomes the UK Government’s Favorite Compliance OfficereasyDNS releases MCP server and skills for AI agentsThe Petabyte Pivot: Why Your Anime Habits are Now a Telco TragedyDarkSword iOS Exploit Leaked, Threatening Older Apple DevicesCritical PyPI Attack Compromises litellm 1.82.7–1.82.8AI Agents Bypass Security Controls, Raise Insider Threat ConcernsIn this issue:Apple Becomes...