The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
AI Governance Gets a Name on the Door (08/21/2026)
Accountability for AI is moving to a named person, the Cyber Resilience Act's first notification obligations are landing, and NIST offered an evaluation framework instead of a checklist.
A Max-Severity Entra ID Flaw, Already Exploited (08/21/2026)
Microsoft patched an Entra ID flaw that was already being used in attacks, researchers found 768 leaked AWS keys with full account control, and GitLab went from patch to exploitation.
A Secret Program Called Keyhole (08/20/2026)
ICE surveillance of protesters is widening through a program called Keyhole, altered AI images are spreading on X, and USCIS is planning a $100 million biometrics project.
A Password Vault Any Website Could Open (08/20/2026)
N-able Passportal handed its vault tokens to any site that asked, Android malware relays data off phones with no connection, and NetScaler takes a 9.3.
Medusa Passes 500 Critical Infrastructure Victims (08/20/2026)
The group folds new exploits in within 24 hours of disclosure, most audit leaders are using AI without a strategy for it, and Illinois added disparate impact liability.
AI-Written Tools Are Now Hitting Siemens PLCs (08/19/2026)
Five federal agencies warned that AI-written Python is aimed at Siemens S7 controllers, 17 Iranians were charged over stolen research, and Latvia lost 1.2 million records.
CareCloud Revised Again, Now 3.7 Million (08/19/2026)
The billing vendor's count moved a third time in sixteen days, the Department of War opened research security audits, and Baylor Genetics disclosed a breach.
An Officer Used a Plate Reader to Stalk a Woman (08/19/2026)
He explained it as seeing a shiny thing, ICE told its own agents to leave the Meta glasses at home, and California moved on wearable recording devices.
CareCloud Goes From 345,000 to 3.3 Million (08/18/2026)
A billing vendor breach grew tenfold in two weeks, the SEC charged executives over a $1.9 billion auto lender collapse, and proposed a new crypto asset regulation.
Clearview's Role in ICE Protest Surveillance (08/18/2026)
Court records detail Clearview AI's role in ICE protest surveillance, agents built protester photo sets during Operation Metro Surge, and all 50 states got plate-reader ranked.
A One-Click Copilot Leak and Zombie Visa Cards (08/18/2026)
Three Copilot Personal flaws let one click pull your mail and Drive, researchers revived expired Visa cards at contactless terminals, and a crew extorts victims twice.
The FTC Settlement Is the Cheap Part (08/17/2026)
A 20-year consent decree costs more after signing than the penalty did, Justice stood up a Fraud Division, and a vishing call reached a health plan administrator.