The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
ShareFile Shutdown, Injective npm Theft & Entra Passkey Fraud (07/10/2026)
Progress tells ShareFile admins to pull the plug, a poisoned Injective SDK drains crypto wallets, and fake Entra passkey calls hand attackers Microsoft 365.
Chat Control Returns, KIDS Act & Meta's AI Photo Maker (07/09/2026)
The EU's Chat Control message scanning survived a kill vote, the House passed the KIDS Act, and Meta's new AI generator can make images of users with public profiles.
EU Withdrawal Button, NJ Data Broker Law & HIPAA Delay (07/09/2026)
The EU withdrawal-button rule is now in force for global sellers, New Jersey enacted the costliest data-broker law yet, and HHS postponed the HIPAA Security Rule overhaul.
RoguePlanet Defender Fix, GigaWiper & $1M County Ransom (07/09/2026)
Microsoft patched the RoguePlanet Defender zero-day after a month of public exploit code, a new GigaWiper backdoor bundles wipers, and a US county paid $1M ransom.
BeyondTrust Bug, ColdFusion Exploit & GitLost Leak (07/07/2026)
BeyondTrust patched two critical auth-bypass flaws in remote access, a maximum-severity Adobe ColdFusion bug is under active exploitation, and GitLost leaks private repos.
Chat Control Vote, In-Car Cameras & Health Data Suits (07/07/2026)
The EU Parliament advanced Chat Control message scanning, new EU cars must carry a driver-monitoring camera, and a health data sharing suit against Veradigm moves ahead.
SEC Fraud Group, Breach Settlement & EU Directive (07/07/2026)
The SEC formed a Retail Fraud Working Group, Calibrated Healthcare settled a breach class action, and the EU Anti-Corruption Directive gives compliance teams new obligations.
AI Ransomware, NetScaler Flaw & Linux VM Escape (07/06/2026)
An AI agent ran a real ransomware attack, a fresh CitrixBleed-style NetScaler flaw is under active exploit, and a 16-year-old Linux KVM bug lets guest VMs escape to the host.
CMMC Rules, Bosch $43M Export Fine & EEOC Shift (07/06/2026)
CMMC self-certification is landing in defense contracts with False Claims Act exposure, Bosch paid $43M for illegal Huawei exports, and the EEOC rescinded its affirmative action guidance.
Pegasus Spyware, Facial Recognition & ICE Surveillance (07/06/2026)
Pegasus spyware hit an EU lawmaker investigating spyware, a UK grocer is scaling facial recognition to 150 more stores, and ICE's watchdog is investigating its online critics.
Basic-Fit Breach Hits 1 Million Members, Adobe Patches Exploited Acrobat Zero-Day, APT41 Steals Cloud Creds
European gym chain Basic-Fit confirmed a breach exposing 1 million members across the EU. Adobe patched an actively exploited Acrobat Reader zero-day that lingered for months, and APT41 is harvesting cloud credentials with a zero-detection backdoor.
Booking.com Customers Warned of Data Hack, FTC Hits Publishing.com With $1.5M Penalty, Californians Sue AI Doctor Recorder
Booking.com is warning customers their data was accessed in a breach. The FTC extracted a $1.5M settlement from Publishing.com for deceptive income claims, and Californians filed suit over an AI tool that records doctor visits without consent.