The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
SEC Builds an Accounting Enforcement Unit, FTC Takes $12M on HSR (08/05/2026)
The SEC stood up a dedicated financial reporting enforcement unit, the FTC settled a $12 million gun-jumping case, and the FCC widened the Covered List again.
ChainDrop npm Worm, N-central in KEV & $130M Wallet Theft (08/04/2026)
A self-propagating worm hit 868 npm packages with 2 billion monthly downloads, CISA added N-able N-central to KEV, and Coldcard losses passed $130 million.
Ad SDKs Leak Location, New Jersey Bans Surveillance Pricing (08/04/2026)
EFF found ad libraries feeding location data to brokers without the developer asking, New Jersey outlawed pricing groceries off personal data, and New York finalized its kids rules.
EU AI Act Enforcement Opens, UBS Fined $125M for AML Failures (08/04/2026)
The European AI Office gained enforcement powers on August 2, UBS paid $125 million over repeat transaction monitoring failures, and a Massachusetts group breached 312,000 records.
Apple Fights the UK Backdoor, Samsung Cuts Proxy Apps & KT Fined (08/03/2026)
Apple took the UK's secret iCloud order to tribunal, Samsung banned smart TV apps that rent out your home internet, and Korea's regulator fined KT after a rogue femtocell.
CareCloud Breach Hits 345,000 & CISA Rewrites the SBOM Rules (08/03/2026)
A billing vendor breached in March notified 345,000 patients today, CISA and 17 partner agencies replaced the 2021 SBOM baseline, and AnMed is still restoring 83 facilities.
N-central Takeover, Passkey Bypass & Water Attacks Spread (08/03/2026)
Attackers took over N-able N-central servers after the first patch failed, Unit 42 signed into passkey accounts with no user present, and water attacks reached seven states.
Coldcard Seed Flaw, Adform Script Poisoning & Adobe 10.0 (08/02/2026)
A 2021 Coldcard firmware bug paid out $88.6 million in a weekend, Adform's ad script rewrote wallet addresses, and Adobe shipped a CVSS 10.0 fix.
Insight Tag Ruling, Singapore GenAI Rules & Minors' Privacy (08/02/2026)
A judge gutted the LinkedIn Insight Tag case because the health site consented for you, and Singapore says scraped personal data can train your model.
EU AI Act Transparency, ALPR Suits & California DROP (08/01/2026)
EU AI Act transparency rules bind tomorrow, plate reader litigation is building on the BIPA model, and California's deletion platform opened today.
EU AI Omnibus, DOJ Declination & Colorado ADMT (08/01/2026)
The EU AI Act Digital Omnibus moved high-risk deadlines to 2027, DOJ issued its first healthcare declination, and Colorado narrowed its AI Act to automated decisions.
OWAReaper Backdoor, Brinks Breach & Water PLC Attacks (08/01/2026)
TA488 backdoored Exchange with OWAReaper months before disclosure, ShinyHunters took 4.9 million Brinks Home records, and CISA wants water PLCs off the internet.