The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
A Phished Inbox Becomes an SEC Filing at a Defense Supplier (08/07/2026)
IEH Corporation disclosed a cyber incident to the SEC after a phished Microsoft 365 account exposed engineering files, and five providers settled pixel class actions.
ICE Took a Million DNA Samples, 20 States Sue Over Benefits Data (08/06/2026)
ICE collected close to a million DNA profiles last year including children's, the NYPD took a woman's DNA off a water cup, and 20 states sued over benefits records.
Snowflake Plea, 4,407 Exposed PLCs & Three Cisco 9.8s (08/06/2026)
Connor Moucka pleaded guilty over breaches touching 100 million people, Forescout counted 4,407 internet-facing Rockwell controllers, and Cisco shipped three 9.8s.
A Vendor Breach Hits 3.8M Patients, Texas Halts Data Center Hookups (08/06/2026)
An Ohio revenue cycle vendor exposed 3.8 million patients, Texas froze data center grid connections pending an audit, and the EU rewrote AI product liability.
Private Relay Leaks Real IPs, Met Police Reprimanded by the ICO (08/05/2026)
Apple's Private Relay is exposing the IP addresses it exists to hide, and the ICO found the Met handed a stalking victim's new address to the man she was hiding from.
Open VSX Evil Twins, CISA Flags Langflow & Water Hits 12 States (08/05/2026)
Open VSX pulled 77 extensions impersonating real developer tools, CISA gave agencies three days on Langflow and Tomcat, and water attacks reached 12 states.
SEC Builds an Accounting Enforcement Unit, FTC Takes $12M on HSR (08/05/2026)
The SEC stood up a dedicated financial reporting enforcement unit, the FTC settled a $12 million gun-jumping case, and the FCC widened the Covered List again.
ChainDrop npm Worm, N-central in KEV & $130M Wallet Theft (08/04/2026)
A self-propagating worm hit 868 npm packages with 2 billion monthly downloads, CISA added N-able N-central to KEV, and Coldcard losses passed $130 million.
Ad SDKs Leak Location, New Jersey Bans Surveillance Pricing (08/04/2026)
EFF found ad libraries feeding location data to brokers without the developer asking, New Jersey outlawed pricing groceries off personal data, and New York finalized its kids rules.
EU AI Act Enforcement Opens, UBS Fined $125M for AML Failures (08/04/2026)
The European AI Office gained enforcement powers on August 2, UBS paid $125 million over repeat transaction monitoring failures, and a Massachusetts group breached 312,000 records.
Apple Fights the UK Backdoor, Samsung Cuts Proxy Apps & KT Fined (08/03/2026)
Apple took the UK's secret iCloud order to tribunal, Samsung banned smart TV apps that rent out your home internet, and Korea's regulator fined KT after a rogue femtocell.
CareCloud Breach Hits 345,000 & CISA Rewrites the SBOM Rules (08/03/2026)
A billing vendor breached in March notified 345,000 patients today, CISA and 17 partner agencies replaced the 2021 SBOM baseline, and AnMed is still restoring 83 facilities.