The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
A $2.25M FCRA Settlement, a 542K Lab Breach & CIPA Demand Letters (07/20/2026)
The FTC proposes a $2.25M tenant screening settlement over FCRA violations, a New Jersey lab discloses a 542,000-person breach, and CIPA demand letters spread.
An AI Agent Breached Hugging Face & WordPress Exploitation Begins (07/20/2026)
Hugging Face says an autonomous AI agent breached its infrastructure, wp2shell exploitation is underway, and HollowGraph hides C2 in 2050-dated calendar events.
Your Opt-Out Button May Do Nothing & NYC's Click to Cancel (07/20/2026)
Lawyers warn most opt-out buttons do not do what users think, New York City adopts a click to cancel rule, and EFF pushes back on stealth crawler bills.
Australia Curbs Government AI Decisions & Victoria's Demasking Push (07/19/2026)
Australia moves to restrict automated AI decision-making in government, Victoria proposes powers to unmask anonymous accounts, and fake login alerts target X users.
SonicWall Zero-Days Exploited Before Disclosure & AI Agent Risk (07/19/2026)
A threat actor exploited SonicWall SMA zero-days before they were public, connecting AI agents to outside services explodes the risk radius, and ViPNet updates get abused.
EU AI Content Rules, SEC Reporting Relief & Proxy Season Trends (07/18/2026)
The EU's new Code of Practice pushes AI-generated content transparency, easier IPO paths raise being-public questions, and 2026 proxy season trends take shape.
Illinois Passes a Frontier AI Law, Plus On-Device Age Checks (07/18/2026)
Illinois becomes the third state to regulate frontier AI, on-device age checks keep your face on your phone, and facial recognition locks go mainstream.
wp2shell Unauth RCE Hits WordPress Core, Plus a 7-Zip Flaw (07/18/2026)
A public exploit drops for an unauthenticated WordPress Core RCE, 7-Zip patches a code-execution bug, and Microsoft warns of a surge in ACR Stealer attacks.
Flock Kills Audio Surveillance, Adversarial Clothing & the Delete Act (07/17/2026)
Flock ends its human-voice distress detection, designers sell anti-facial-recognition clothing, and California's data broker deletion platform goes live August 1.
A $12M FTC Filing Penalty, Atrium's Pixel Payout & a CPOM First (07/17/2026)
The FTC fines two medtech firms $12M for skipping a merger filing, Atrium Health pays $1.8M over tracking pixels, and California cracks down on MSO-PC structures.
Inc Ransomware Hits SonicWall Zero-Days & an 11-Byte OpenSSL Flaw (07/17/2026)
Inc ransomware chains two SonicWall SMA zero-days for root, an 11-byte request freezes OpenSSL memory, and CISA orders agencies to patch FortiSandbox.
Ransomware Halts Coca-Cola Production & Scattered Spider Jailed (07/16/2026)
Ransomware suspended Fairlife dairy production across the US, two Scattered Spider members got 5.5 years for the TfL hack, and ClickFix reached state actors.