Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
The DOJ prosecutes an American for using a duress password at the border, a leaked document maps ICE's surveillance reach, and activists are disabling Flock license-plate cameras nationwide.
GitHub and PyPI introduce a time-based cooldown on new dependencies, Steam forum ClickFix lures infect gamers with cryptominers, and a report says ChatGPT gave some users step-by-step bioweapon guides.
Hundreds of drone-as-first-responder programs clear a key hurdle, the EU pushes back its AI Act workplace rules to December 2027, and MSG's face-recognition cameras went dark for one guest.
A malvertising operation makes victims' browsers assemble the malware locally, Cl0p affiliates exploit unauthenticated RCE in PTC Windchill and FlexPLM, and an unpatched Fastjson flaw is under attack.
A Tennessee pathology group notifies 170,000 patients of a breach, the FCC launches its first national-security drone revocation, and a US visa rule adds new employer tracking duties.
DentaQuest begins notifying more than 15 million individuals after a May breach, a new report finds malicious insider incidents climbing, and NIS2 obligations bite for cloud and data centre providers.
Brussels fines Google €890m over search and app store conduct, Origin Energy customers lose banking details in a breach, and Colorado's governor vetoes a surveillance-pricing bill.
An international alert names Laundry Bear behind zero-click Zimbra attacks that steal mail and 2FA codes, researchers find millions of cars share one Bluetooth key, and Oracle ships 1,449 patches.
The Fourth Circuit rules border agents can manually search phones without suspicion, the White House launches an AI-vulnerability clearinghouse, and France becomes the first EU country to ban social media for children under 15.
The Department of Defense suspends CMMC Phase 2 requirements, the DOJ and DHS signal an end to lenient treatment of customs fraud, and TriWest discloses a breach affecting Tricare beneficiaries.
US agencies broaden their warning on Iran-linked attacks against operational technology, a snap-confine flaw hands local users root on default Ubuntu, and a Windmill bug is under active exploitation.
ApolloMD settles a data breach suit for $4.02M, a new FCPA action targets Scoular over customs bribes, and Craneware discloses a healthcare data theft.
Critical security news, threat briefs, and company updates from The Axe Report, delivered straight to your inbox. No spam, unsubscribe anytime.
Whether you need a full adversarial facility audit or an executive resilience protocol for your leadership team.
