The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
wp2shell Unauth RCE Hits WordPress Core, Plus a 7-Zip Flaw (07/18/2026)
A public exploit drops for an unauthenticated WordPress Core RCE, 7-Zip patches a code-execution bug, and Microsoft warns of a surge in ACR Stealer attacks.
Flock Kills Audio Surveillance, Adversarial Clothing & the Delete Act (07/17/2026)
Flock ends its human-voice distress detection, designers sell anti-facial-recognition clothing, and California's data broker deletion platform goes live August 1.
A $12M FTC Filing Penalty, Atrium's Pixel Payout & a CPOM First (07/17/2026)
The FTC fines two medtech firms $12M for skipping a merger filing, Atrium Health pays $1.8M over tracking pixels, and California cracks down on MSO-PC structures.
Inc Ransomware Hits SonicWall Zero-Days & an 11-Byte OpenSSL Flaw (07/17/2026)
Inc ransomware chains two SonicWall SMA zero-days for root, an 11-byte request freezes OpenSSL memory, and CISA orders agencies to patch FortiSandbox.
Ransomware Halts Coca-Cola Production & Scattered Spider Jailed (07/16/2026)
Ransomware suspended Fairlife dairy production across the US, two Scattered Spider members got 5.5 years for the TfL hack, and ClickFix reached state actors.
A Pegasus Whistleblower, a Period Tracker & the 23andMe Payout (07/16/2026)
A Moroccan intelligence insider details years of Pegasus use, Mozilla finds a period tracker sharing health data, and 42 states settle with 23andMe over a breach.
SEC Proposes E-Delivery, DOJ Targets PPP Loans & FTC Eyes AI (07/16/2026)
The SEC proposed Regulation E-Delivery, the DOJ is pursuing nonprofits over PPP loans under the False Claims Act, and the FTC moved on AI deception.
A $21.3M False Claims Hit, EU Pay Transparency & the AI Controls Matrix (07/15/2026)
The DOJ settles for $21.3M with a government contractor, EU pay transparency deadlines close in, and the Cloud Security Alliance ships AI Controls Matrix v1.1.
Identity Beats Exploits, a Windows Zero-Day PoC & SharePoint Under Attack (07/15/2026)
Sophos finds 67% of incidents start with identity, a Windows zero-day PoC drops a day after Patch Tuesday, and CISA warns of three exploited SharePoint flaws.
Meta's AI Layoff Lawsuit, a Denied Mass Warrant & Texas Age Checks Stand (07/15/2026)
Meta is sued over AI-tagged layoffs of workers on leave, a judge denies a warrant on thousands of Ohio phones, and the Supreme Court lets Texas app-store age checks stand.
CMMC Phase II Suspended, Bulk Data Deadlines Loom & Martyn's Law Lands (07/14/2026)
The Pentagon suspends CMMC Phase II, the DOJ Bulk Data Transfer Rule's audit deadlines approach, and Martyn's Law pushes counterterror planning into event security.
Microsoft's Record 570 Patches, SAP's 9.9 Flaw & a Secure Boot Bypass (07/14/2026)
Microsoft ships a record 570 fixes, SAP patches a CVSS 9.9 NetWeaver flaw, 11 signed UEFI shims bypass Secure Boot, and Iran located US troops via mobile network flaws.