[APAC] Singapore’s Court of Appeal rejected suspected cybercriminal Wang Yunhe’s challenge to police seizure of devices and financial items connected with a United States extradition request. The disputed material included phones, flash drives, a laptop and processor, with the court finding officers could rely on requesting-state information when identifying potential evidence or proceeds linked to the alleged malware and fraud offences (Source: The Straits Times, 09-08-2026)

[EMEA] NHS Tayside is investigating whether staff at Ninewells Hospital in Dundee improperly accessed the medical record of a nine-year-old patient without authorisation or clinical need. The health board said any data-protection breach would be recorded and investigated, while access-control records and staff activity provide the evidential basis for determining who viewed the file, when access occurred and whether reporting to the Information Commissioner is required (Source: The Register, 07-08-2026)

[APAC] South Korean security company Genians reported that infrastructure linked to North Korean-associated Kimsuky contained locally run AI models, document-search tooling and AI-assisted development software. Reuters said the specific findings could not be independently verified, making infrastructure artefacts, decoy documents and tool deployment more useful as attribution signals when correlated with established Kimsuky techniques than as standalone proof of state-directed activity (Source: Reuters, 10-08-2026)

[AMER] Levi Strauss disclosed that an unauthorised third party accessed company systems after a social-engineering attack targeted three employees, with some corporate information accessed and extracted. The company said operations were not disrupted and no material impact was expected, while the investigation must reconstruct employee interactions, account activity and data-access paths to establish exactly what was taken and whether the intrusion connects to the wider phone-based targeting campaign reported by Reuters (Source: Reuters, 07-08-2026)

[AMER] Suisun City, California, declared a state of emergency after malicious software compromised municipal systems and disrupted 911 routing, police and fire dispatch, records and online services. Officials shut down the full network to contain the threat and preserve evidence for a federal investigation, while broader reporting confirms public-safety continuity through county dispatch but leaves the malware source and responsible actor unidentified (Source: Suisun City, 08-08-2026)

[EMEA] Researchers reported that the Head Mare group compromised unpatched TrueConf servers in Russia and replaced legitimate client installers with versions delivering PhantomCore backdoors. Kaspersky’s observed chain used unauthenticated server access, sandbox escape and SYSTEM-level execution before installer substitution, creating a supply-chain-style evidence trail across server logs, web-shell artefacts, unsigned client packages, credential dumping and OneDrive-mediated command traffic that investigators can correlate across affected organisations (Source: BleepingComputer, 08-08-2026)

[AMER] Varonis Threat Labs disclosed RovoBlast, a now-fixed weakness in Atlassian’s Rovo enterprise AI assistant that allowed attacker-supplied instructions to enter a trusted user session through a crafted link. Testing showed the injected prompt could exploit Rovo’s federated access and ResearchAgent capabilities to reach connected organisational data, making prompt provenance, user identity, connector permissions and outbound agent actions important evidence when investigating suspected AI-assisted data exposure (Source: Varonis Threat Labs, 07-08-2026)

[EMEA] Security research presented at DEF CON detailed now-remediated flaws in Belgium’s Connective eID software, used by more than two million people, major banks and government agencies. The weaknesses reportedly allowed unauthorised websites to interact with the local application, capture PINs and, separately, execute user-level code, giving investigators concrete browser-origin, authentication-dialogue, signing-token and endpoint artefacts to examine rather than assuming that dependent identity services themselves were compromised (Source: SecurityWeek, 10-08-2026)

[APAC] Jaipur police arrested five people after tracing an alleged cyber-fraud operation from a fake call centre used for online gaming and investment scams exceeding ₹1 crore. Investigators analysed call-detail records, bank transactions, CCTV and other technical evidence before the raid, then seized phones, laptops and banking records for forensic examination intended to map money flows, identify additional participants and connect the operation with complaints recorded through India’s national cybercrime helpline (Source: The Times of India, 09-08-2026)

[APAC] Cyberabad Police reported on 9 August that an accused person had been arrested over allegedly abusive comments posted on social media in Telangana, India. The public notice identifies the enforcement action but does not disclose the platform, account-attribution method, preserved content, device evidence or detailed legal findings, leaving those evidential elements unavailable for independent assessment at publication time (Source: Cyberabad Police, 09-08-2026)

[EMEA] Turkey’s new cybersecurity law has centralised significant digital oversight powers in the presidential Cybersecurity Directorate, including rapid directions to internet platforms, according to the Financial Times. The government presents the measures as necessary for national security, while rights groups question their breadth and post-action judicial review, making transparent records of directives, platform compliance, identity verification and access decisions important for subsequent legal scrutiny and evidential accountability (Source: Financial Times, 09-08-2026)

[AMER] The United States administration has developed a voluntary process for selected advanced AI developers to submit models for government cybersecurity and national-security evaluation before release, with important details remaining restricted. The framework raises practical questions about what test evidence is retained, how findings are shared, which models fall within scope and how organisations distinguish voluntary technical assessment from regulatory assurance when documenting model risks and subsequent security decisions (Source: The Guardian, 07-08-2026)