Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
A court set strict handling rules for the Change Healthcare breach data in multidistrict litigation, and researchers found critical flaws in two consumer health devices.
Law enforcement documents show agencies monitoring social accounts critical of plate readers, and a reporter's McDonald's file ran to 515 pages.
Lazarus used a Windows zero-day against defense firms and wrapped delivery in post-quantum crypto, and 737 Chrome VPN extensions were routing traffic through proxies.
New DOJ and DHS guidance reshapes trade enforcement exposure, healthcare providers got a Gunra ransomware warning, and the FTC sent Mortgage Connect a warning letter.
British Transport Police put live facial recognition into London Underground stations, and California issued its first data broker fine under the state privacy law.
Microsoft patched 400 flaws including an exploited zero-day, researchers turned SIM cards into modem backdoors, and attackers stopped a Polish plant's turbine.
A breach at shipping giant Ceva Logistics reached its customers' customers, three research teams defeated passkey protections, and ransomware crews took SonicWall.
Zscaler mapped 351 victims across 334 organizations and found attackers picking managers with budget authority, average age 46, mostly outside IT.
Metabase disclosed a maximum-severity zero-day already under exploitation, N-able shipped a third round of fixes, and CISA added Kemp LoadMaster after 792 attempts.
Nearly 800 npm packages shipped a cross-platform trojan, N-able confirmed attackers reached customer networks, and a GitHub issue executed code on coding-agent runners.
ICE is buying credit card application data through brokers, a New Mexico judge ordered Meta to pay $567 million over child safety, and an NHS trust is probing record access.
IEH Corporation disclosed a cyber incident to the SEC after a phished Microsoft 365 account exposed engineering files, and five providers settled pixel class actions.
Critical security news, threat briefs, and company updates from The Axe Report, delivered straight to your inbox. No spam, unsubscribe anytime.
Whether you need a full adversarial facility audit or an executive resilience protocol for your leadership team.
