The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
SonicWall Zero-Days Exploited Before Disclosure & AI Agent Risk (07/19/2026)
A threat actor exploited SonicWall SMA zero-days before they were public, connecting AI agents to outside services explodes the risk radius, and ViPNet updates get abused.
EU AI Content Rules, SEC Reporting Relief & Proxy Season Trends (07/18/2026)
The EU's new Code of Practice pushes AI-generated content transparency, easier IPO paths raise being-public questions, and 2026 proxy season trends take shape.
Illinois Passes a Frontier AI Law, Plus On-Device Age Checks (07/18/2026)
Illinois becomes the third state to regulate frontier AI, on-device age checks keep your face on your phone, and facial recognition locks go mainstream.
wp2shell Unauth RCE Hits WordPress Core, Plus a 7-Zip Flaw (07/18/2026)
A public exploit drops for an unauthenticated WordPress Core RCE, 7-Zip patches a code-execution bug, and Microsoft warns of a surge in ACR Stealer attacks.
Flock Kills Audio Surveillance, Adversarial Clothing & the Delete Act (07/17/2026)
Flock ends its human-voice distress detection, designers sell anti-facial-recognition clothing, and California's data broker deletion platform goes live August 1.
A $12M FTC Filing Penalty, Atrium's Pixel Payout & a CPOM First (07/17/2026)
The FTC fines two medtech firms $12M for skipping a merger filing, Atrium Health pays $1.8M over tracking pixels, and California cracks down on MSO-PC structures.
Inc Ransomware Hits SonicWall Zero-Days & an 11-Byte OpenSSL Flaw (07/17/2026)
Inc ransomware chains two SonicWall SMA zero-days for root, an 11-byte request freezes OpenSSL memory, and CISA orders agencies to patch FortiSandbox.
Ransomware Halts Coca-Cola Production & Scattered Spider Jailed (07/16/2026)
Ransomware suspended Fairlife dairy production across the US, two Scattered Spider members got 5.5 years for the TfL hack, and ClickFix reached state actors.
A Pegasus Whistleblower, a Period Tracker & the 23andMe Payout (07/16/2026)
A Moroccan intelligence insider details years of Pegasus use, Mozilla finds a period tracker sharing health data, and 42 states settle with 23andMe over a breach.
SEC Proposes E-Delivery, DOJ Targets PPP Loans & FTC Eyes AI (07/16/2026)
The SEC proposed Regulation E-Delivery, the DOJ is pursuing nonprofits over PPP loans under the False Claims Act, and the FTC moved on AI deception.
A $21.3M False Claims Hit, EU Pay Transparency & the AI Controls Matrix (07/15/2026)
The DOJ settles for $21.3M with a government contractor, EU pay transparency deadlines close in, and the Cloud Security Alliance ships AI Controls Matrix v1.1.
Identity Beats Exploits, a Windows Zero-Day PoC & SharePoint Under Attack (07/15/2026)
Sophos finds 67% of incidents start with identity, a Windows zero-day PoC drops a day after Patch Tuesday, and CISA warns of three exploited SharePoint flaws.