The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
N-central Takeover, Passkey Bypass & Water Attacks Spread (08/03/2026)
Attackers took over N-able N-central servers after the first patch failed, Unit 42 signed into passkey accounts with no user present, and water attacks reached seven states.
Coldcard Seed Flaw, Adform Script Poisoning & Adobe 10.0 (08/02/2026)
A 2021 Coldcard firmware bug paid out $88.6 million in a weekend, Adform's ad script rewrote wallet addresses, and Adobe shipped a CVSS 10.0 fix.
Insight Tag Ruling, Singapore GenAI Rules & Minors' Privacy (08/02/2026)
A judge gutted the LinkedIn Insight Tag case because the health site consented for you, and Singapore says scraped personal data can train your model.
EU AI Act Transparency, ALPR Suits & California DROP (08/01/2026)
EU AI Act transparency rules bind tomorrow, plate reader litigation is building on the BIPA model, and California's deletion platform opened today.
EU AI Omnibus, DOJ Declination & Colorado ADMT (08/01/2026)
The EU AI Act Digital Omnibus moved high-risk deadlines to 2027, DOJ issued its first healthcare declination, and Colorado narrowed its AI Act to automated decisions.
OWAReaper Backdoor, Brinks Breach & Water PLC Attacks (08/01/2026)
TA488 backdoored Exchange with OWAReaper months before disclosure, ShinyHunters took 4.9 million Brinks Home records, and CISA wants water PLCs off the internet.
Midnight Blizzard Hijacks Hotel Sign-In Portals & Chrome Fixes 1,442 Flaws (07/31/2026)
A Russian sub-cluster compromises hospitality sign-in portals to hit travelers worldwide, three Chrome releases fix more bugs than the prior 23 combined, and CISA warns of a spike in water system attacks.
The DOJ Issues Its First Healthcare Declination & Health-ISAC Warns on ShinyHunters (07/31/2026)
The DOJ declines criminal charges against a healthcare company under its new enforcement policy, Health-ISAC warns of rising ShinyHunters attacks, and Colorado's AI Act is amended after a long fight.
EU AI Act Transparency Enforcement Starts Sunday & South Carolina Adds Personal Liability (07/31/2026)
The EU AI Act's transparency rules take effect August 2 requiring chatbots to identify themselves, South Carolina's design code reaches employees personally, and the Tunick border case gets a closer read.
An Azure Flaw Exposed a Platform-Wide Key & Russian Actors Survive Credential Rotation (07/30/2026)
A patched Azure Cosmos DB flaw could have given access to any customer database, Russian actors exploit an OWA flaw to keep mailbox access after password resets, and Copilot for Word propagates hidden prompts.
The FTC Sues Hims & Hers Over Health Data Sharing & Flock Cameras Draw Safety Warnings (07/30/2026)
The FTC and two states sue Hims & Hers for sharing sensitive health information with advertisers, safety advocates say Flock camera poles may fail crash standards, and xAI sues Minnesota over its nudification ban.
OSF Healthcare Pays $552K to OCR & California Mandates AI Training-Data Disclosure (07/30/2026)
OSF Healthcare settles an OCR HIPAA investigation for $552,250, California's AB 2013 requires generative AI developers to disclose training data, and the EU finalizes AI Act transparency guidelines.