The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
The SEC Moves to Rescind Pay to Play (09/04/2026)
The SEC proposed rescinding its pay-to-play rule for investment advisers, the G7 told organizations to start the post-quantum migration now, and another vendor breach hit four practices.
Cisco Nexus Root RCE and a Worm at 469 Locations (09/03/2026)
Cisco patched an unauthenticated root execution flaw in Nexus 9000 switches, the Shai-Hulud worm now scans 469 credential locations, and Coder's registry served malicious Terraform modules.
FinCEN Clarifies What You Cannot Tell a Customer (09/03/2026)
Five federal agencies clarified SAR confidentiality for customer communications, the NBA found the Clippers arranged sham endorsements, and MCNA settled its 2023 breach litigation.
Flock Taught Police How to Watch a Protest (09/03/2026)
A Flock webinar walked police through surveilling protests and parades, 170 million ID scans surfaced on a Russian forum, and Pegasus reached a Serbian student activist's iPhone.
153 Million Driver's Licenses For Sale (09/02/2026)
A search site claimed more than 150 million license photos taken from an ID verification service, Texas police used AI to write up a Flock search, and Austria cleared a credit data class action.
SonicWall Zero-Days and a Hijacked Update Route (09/02/2026)
Two SonicWall SMA 1000 zero-days are chained in live attacks, a BGP hijack poisoned a Virtualizor update, and a repo's own Git config can make AI coding agents run attacker code.
Texas Bans Price Optimization in Ratemaking (09/02/2026)
Texas declared price optimization unfairly discriminatory, Colorado proposed AI Act rules that reach deployers, and two more healthcare vendors put patient records in breach notices.
DaVita Pays $15 Million and Aesto Loses 9.5 Million (09/01/2026)
Two healthcare settlements land the same day, counsel question whether a forensic audit is a real thing, and CIPA gets rewritten by SB 690.
California Takes Away the Private Suit (09/01/2026)
Lawmakers gutted private enforcement under a key state privacy law, the FTC and states sued Amazon over a secret ad surcharge, and Austria cleared a class action.
Four Days From Patch to Weaponized (09/01/2026)
A 9.8 in JFrog Artifactory lets an unauthenticated attacker mint admin tokens, and exploitation began four days after the fix shipped.
Cities Are Canceling Flock Contracts (08/31/2026)
August set a record for terminated camera contracts, Connecticut settled with both Meta and TaxAct, and the EFF published a practical doxxing response guide.
McKesson's Cloud Accounts and a $55 Million Demand (08/31/2026)
Phishing reached McKesson's Snowflake and Salesforce tenants, malware is hiding in PNG files, and North Korean job fraud has moved into healthcare and sales.