The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
DaVita Pays $15 Million and Aesto Loses 9.5 Million (09/01/2026)
Two healthcare settlements land the same day, counsel question whether a forensic audit is a real thing, and CIPA gets rewritten by SB 690.
California Takes Away the Private Suit (09/01/2026)
Lawmakers gutted private enforcement under a key state privacy law, the FTC and states sued Amazon over a secret ad surcharge, and Austria cleared a class action.
Four Days From Patch to Weaponized (09/01/2026)
A 9.8 in JFrog Artifactory lets an unauthenticated attacker mint admin tokens, and exploitation began four days after the fix shipped.
Cities Are Canceling Flock Contracts (08/31/2026)
August set a record for terminated camera contracts, Connecticut settled with both Meta and TaxAct, and the EFF published a practical doxxing response guide.
McKesson's Cloud Accounts and a $55 Million Demand (08/31/2026)
Phishing reached McKesson's Snowflake and Salesforce tenants, malware is hiding in PNG files, and North Korean job fraud has moved into healthcare and sales.
A Policy Is Not Evidence (08/31/2026)
AI governance is being asked to produce artifacts on demand, self-funded plans keep misreading the covered entity line, and the SEC is sweeping fake Form ADV filers.
Six Months of a Reporter's Phone Records (08/30/2026)
DHS obtained a Minneapolis journalist's call records without notice or a chance to object, and Texas has frozen state funding for more Flock cameras.
Someone Has Put a Name to the Airport Breach (08/30/2026)
FulcrumSec claims the Manchester Airports theft at 86 GB with samples validated, Chrome extensions are shipping a modular stealer, and stolen sessions keep being the way in.
PaperCut Gets Worse and Cosmos Knew (08/29/2026)
Two chained PaperCut flaws give unauthenticated code execution, researchers already have bypasses for the newest patch, and Cosmos Labs shipped a silent fix.
FinCEN Ends Beneficial Ownership Reporting (08/28/2026)
The BOI requirement is permanently over for US companies, the DOJ signals renewed white collar focus, and two eye care providers settle for very different amounts.
ICE Is Buying Robot Dogs (08/28/2026)
Procurement records show ICE planning to spend millions on Boston Dynamics quadrupeds, Daytona Beach approves face searches of license photos, and TaxAct settles.
A Print Server Zero-Day and Three Perfect Tens (08/28/2026)
PaperCut is under active exploitation across every NG and MF version, ServiceNow has three CVSS 10.0 flaws, and researchers found factory implants in cheap routers.