The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
A Language Model Now Drives the Command and Control (08/22/2026)
RedC2 4.0 turns plain-English intent into beacon commands and arrived through 14 trojanized npm packages, while a supply chain attack put a proxy botnet in car head units.
TikTok Pays $400 Million Over Children's Privacy (08/22/2026)
The Justice Department settled two years after filing, AirPods are reported to be getting cameras, and nobody can tell whether the person opposite is recording.
France Published Four Breach Fines in One Day (08/21/2026)
The CNIL's decisions total nearly 50 million euros, led by 42 million against Free Mobile and Free over a breach reaching 24 million subscriber contracts.
AI Governance Gets a Name on the Door (08/21/2026)
Accountability for AI is moving to a named person, the Cyber Resilience Act's first notification obligations are landing, and NIST offered an evaluation framework instead of a checklist.
A Max-Severity Entra ID Flaw, Already Exploited (08/21/2026)
Microsoft patched an Entra ID flaw that was already being used in attacks, researchers found 768 leaked AWS keys with full account control, and GitLab went from patch to exploitation.
A Secret Program Called Keyhole (08/20/2026)
ICE surveillance of protesters is widening through a program called Keyhole, altered AI images are spreading on X, and USCIS is planning a $100 million biometrics project.
A Password Vault Any Website Could Open (08/20/2026)
N-able Passportal handed its vault tokens to any site that asked, Android malware relays data off phones with no connection, and NetScaler takes a 9.3.
Medusa Passes 500 Critical Infrastructure Victims (08/20/2026)
The group folds new exploits in within 24 hours of disclosure, most audit leaders are using AI without a strategy for it, and Illinois added disparate impact liability.
AI-Written Tools Are Now Hitting Siemens PLCs (08/19/2026)
Five federal agencies warned that AI-written Python is aimed at Siemens S7 controllers, 17 Iranians were charged over stolen research, and Latvia lost 1.2 million records.
CareCloud Revised Again, Now 3.7 Million (08/19/2026)
The billing vendor's count moved a third time in sixteen days, the Department of War opened research security audits, and Baylor Genetics disclosed a breach.
An Officer Used a Plate Reader to Stalk a Woman (08/19/2026)
He explained it as seeing a shiny thing, ICE told its own agents to leave the Meta glasses at home, and California moved on wearable recording devices.
CareCloud Goes From 345,000 to 3.3 Million (08/18/2026)
A billing vendor breach grew tenfold in two weeks, the SEC charged executives over a $1.9 billion auto lender collapse, and proposed a new crypto asset regulation.