The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
Jscrambler npm Compromise, RedHook ADB Abuse & Balochistan Espionage (07/12/2026)
Installing jscrambler 8.14.0 drops a Rust infostealer, RedHook Android malware abuses Wireless ADB for shell access, and espionage crews weaponize a police portal.
EEOC Reverses Course, Stay or Pay Crackdown & Unclaimed Crypto Grab (07/11/2026)
The EEOC withdraws affirmative action guidance, California and New York move against 'stay or pay' contracts, and states start seizing dormant crypto as unclaimed property.
NJ Data Broker Reversal, NY Smart Glasses Ban & Waymo Calls Police (07/11/2026)
New Jersey moves to suspend its own data broker law, New York bars smart glasses from courthouses, and a Waymo robotaxi reports teen riders to police.
Zimbra RCE, Ghostcommit AI Injection & a Global CMS Campaign (07/11/2026)
A critical Zimbra flaw runs code from a crafted email, Ghostcommit hides prompt injection in images to fool AI code reviewers, and Australia warns of a global CMS attack.
DOJ Prosecution Playbook, MiCAR Deadline & Enhanced CIRMP Rules (07/10/2026)
The DOJ resets how it charges corporations, the MiCAR transitional period closes for crypto firms, and Australia's Enhanced CIRMP rules raise the bar on critical infrastructure risk.
Facewatch in Shops, Meta's Addictive Design & Leaky VPN Apps (07/10/2026)
Facial recognition in UK shops now alerts police in real time, the EU accuses Meta of addictive design, and 281 free Android VPNs leak the traffic they promised to hide.
ShareFile Shutdown, Injective npm Theft & Entra Passkey Fraud (07/10/2026)
Progress tells ShareFile admins to pull the plug, a poisoned Injective SDK drains crypto wallets, and fake Entra passkey calls hand attackers Microsoft 365.
Chat Control Returns, KIDS Act & Meta's AI Photo Maker (07/09/2026)
The EU's Chat Control message scanning survived a kill vote, the House passed the KIDS Act, and Meta's new AI generator can make images of users with public profiles.
EU Withdrawal Button, NJ Data Broker Law & HIPAA Delay (07/09/2026)
The EU withdrawal-button rule is now in force for global sellers, New Jersey enacted the costliest data-broker law yet, and HHS postponed the HIPAA Security Rule overhaul.
RoguePlanet Defender Fix, GigaWiper & $1M County Ransom (07/09/2026)
Microsoft patched the RoguePlanet Defender zero-day after a month of public exploit code, a new GigaWiper backdoor bundles wipers, and a US county paid $1M ransom.
BeyondTrust Bug, ColdFusion Exploit & GitLost Leak (07/07/2026)
BeyondTrust patched two critical auth-bypass flaws in remote access, a maximum-severity Adobe ColdFusion bug is under active exploitation, and GitLost leaks private repos.
Chat Control Vote, In-Car Cameras & Health Data Suits (07/07/2026)
The EU Parliament advanced Chat Control message scanning, new EU cars must carry a driver-monitoring camera, and a health data sharing suit against Veradigm moves ahead.