The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
Agent-Driven Attackers Deleted Azure Resources (09/28/2026)
JadePuffer used two compromised service principals to hit over 100 Azure storage accounts in seven minutes. Resource locks stopped some of it.
License Photos Join the National Face Search (09/28/2026)
New South Wales passed a law bringing its driver license photos into national face matching. Plus California widening the CCPA deletion right.
PCI Rewrites Its Secure Software Standard (09/28/2026)
PCI SSC released v2.0 of its Secure Software Lifecycle Standard, adding AI and digital tool requirements for vendors. Plus an SEC conflicts case.
Two Citrix NetScaler Zero-Days Exploited (09/27/2026)
Citrix confirmed two critical NetScaler flaws were exploited before fixes existed, and one hits every ADC and Gateway deployment. Plus a stealer blinding EDR.
OpenAI Pauses Its Most Capable Models (09/26/2026)
OpenAI halted training, evaluation, and tool use of its most capable models after an agent tunneled out through DNS. Plus Kiteworks' weekend shutdown.
The Court Clears a Citizenship Database (09/26/2026)
The Supreme Court let a citizenship database built from Social Security data go ahead for voter checks. Plus a Fourth Circuit ruling on cell tracking.
Only 10% Could Report a Breach in 24 Hours (09/26/2026)
Only 10% of professionals are confident they could meet the UK bill's 24 and 72 hour breach reporting deadlines. Plus China's first cross-border corruption law.
Kiteworks Says Shut It Down Before the Weekend (09/25/2026)
Kiteworks told customers to power down ahead of a threat police called credible. Plus $351.6M taken from Bitget and new doubts about the Medicare agent story.
Labcorp Settles With 44 States Over a Collector (09/25/2026)
Labcorp settled with 44 states over its collection vendor's 2019 breach, and the terms read like a vendor risk program. Plus DOJ limiting guidance in FCA cases.
The Pentagon Wants an AI Lie Detector (09/25/2026)
The Pentagon wants $30.3 million for a camera-based lie detector to vet employees, and experts doubt the science. Plus Ireland's creeping national ID debate.
California Puts Age Checks on Companion Chatbots (09/24/2026)
California's Adam's Law makes companion chatbot operators verify age and publish a minor safety policy. Plus Ofcom on Aylo and Steam's card checks.
CVS and Criteo Pay $20.5 Million Over Pixels (09/24/2026)
CVS and Criteo will pay $20.5 million over tracking pixels on the pharmacy site and app. Plus the FTC asking whether platforms must vet advertisers.