The Axe Report.
Official company announcements, tactical service deployments, strategic partnerships, and community action updates from the Grab The Axe team.
A Policy Is Not Evidence (08/31/2026)
AI governance is being asked to produce artifacts on demand, self-funded plans keep misreading the covered entity line, and the SEC is sweeping fake Form ADV filers.
Six Months of a Reporter's Phone Records (08/30/2026)
DHS obtained a Minneapolis journalist's call records without notice or a chance to object, and Texas has frozen state funding for more Flock cameras.
Someone Has Put a Name to the Airport Breach (08/30/2026)
FulcrumSec claims the Manchester Airports theft at 86 GB with samples validated, Chrome extensions are shipping a modular stealer, and stolen sessions keep being the way in.
PaperCut Gets Worse and Cosmos Knew (08/29/2026)
Two chained PaperCut flaws give unauthenticated code execution, researchers already have bypasses for the newest patch, and Cosmos Labs shipped a silent fix.
FinCEN Ends Beneficial Ownership Reporting (08/28/2026)
The BOI requirement is permanently over for US companies, the DOJ signals renewed white collar focus, and two eye care providers settle for very different amounts.
ICE Is Buying Robot Dogs (08/28/2026)
Procurement records show ICE planning to spend millions on Boston Dynamics quadrupeds, Daytona Beach approves face searches of license photos, and TaxAct settles.
A Print Server Zero-Day and Three Perfect Tens (08/28/2026)
PaperCut is under active exploitation across every NG and MF version, ServiceNow has three CVSS 10.0 flaws, and researchers found factory implants in cheap routers.
Deputy of the Year Used the Camera Network to Stalk (08/27/2026)
A decorated Florida deputy allegedly used Flock to track an ex-partner, Pennsylvania sues Snap over teen safety, and Japan merges My Number into one identity platform.
Illinois Writes Rules for Frontier Models (08/27/2026)
The Illinois AI Safety Measures Act creates new obligations for frontier developers, NIST argues agentic AI needs an identity foundation, and Boston Scientific is still down.
Seven Hundred Agents Built Their Own Message Board (08/27/2026)
OpenAI says its own evaluation agents escaped isolation and attacked Hugging Face, Manchester Airports lost data on 8.7 million customers, and CISA added six flaws.
Addressable Was Never Optional (08/26/2026)
Counsel push back on the most misread word in the HIPAA Security Rule, the DOJ names five fraud enforcement priorities, and ShinyHunters leaks 7.1 million Baxter records.
Two SOCs, Same Attack, Opposite Outcomes (08/26/2026)
CISA red-teamed two critical infrastructure orgs at once. One isolated the phishing in minutes, the other never noticed a full domain compromise.