[AMER] Shoshone Medical Center said on 25 August that forensic investigators examining unauthorised access to an employee email account found a limited amount of patient information may have been accessed, although no misuse has been identified. The investigation could not rule out access to medical, insurance and identification data, illustrating why scoped mailbox evidence and carefully qualified findings matter when determining breach impact (Source: Shoshone Medical Center, 25-08-2026).

[AMER] Northern Counties Health Care said on 25 August that it was investigating a cybersecurity incident affecting portions of its technology environment after securing systems, engaging specialists and containing the identified vulnerability. Patient care remained available with some temporary limitations while the investigation continued, leaving system evidence, containment timing and any indication of unauthorised activity central to establishing the incident’s eventual scope and impact (Source: Northern Counties Health Care, 25-08-2026).

[APAC] India’s National Investigation Agency searched five locations across Maharashtra, Gujarat, Telangana, Bihar and Delhi on 25 August in its cyber-terrorism investigation into alleged DDoS attacks against 54 government websites during Operation Sindoor. Investigators seized laptops, mobile phones, pen drives and other digital devices, making forensic examination and correlation of those artefacts central to establishing infrastructure, individual roles and any wider support network (Source: The Indian Express, 25-08-2026).

[APAC] Panvel City Police in Maharashtra reported on 25 August that officers had dismantled an alleged online-loan fraud call centre whose operators impersonated finance-company representatives and demanded processing payments from prospective borrowers. The investigation provides a digital-evidence trail across call records, messaging, payment accounts, devices and customer data that can help establish operator roles, victim links and whether the activity connected to wider fraud infrastructure (Source: Mid-Day, 25-08-2026).

[EMEA] Norway’s Digitalisation Agency said on 25 August that a DDoS attack continued to disrupt shared government services including ID-porten, MinID, eSignering and digital post while mitigation remained active. Independent regional and specialist coverage corroborated the service disruption across Norway, while Digdir reported no indication of intrusion or personal-data compromise, an important distinction when defining investigative scope and operational impact (Source: Digitaliseringsdirektoratet, 25-08-2026).

[AMER] Nutex Health disclosed on 24 August that an unauthorised third party accessed and exfiltrated information from company servers, while the healthcare operator continued assessing whether patient, employee, provider, financial, business or intellectual-property data was affected. External forensic specialists and law enforcement are engaged, and no material operational impact had been identified, leaving the extent of exposure dependent on continuing examination of server, identity and exfiltration evidence (Source: US Securities and Exchange Commission, 24-08-2026).

[APAC] Singapore’s Cyber Security Agency disclosed two high-severity Admin By Request vulnerabilities on 26 August affecting macOS versions 5.2.2 and below, including privilege-escalation and persistent-root-access flaws. The weaknesses, CVE-2026-78236 and CVE-2026-78237, were coordinated through responsible disclosure and are patched, giving investigators and defenders clear version, privilege and persistence indicators to check when determining whether exposed endpoints experienced unauthorised elevation (Source: Cyber Security Agency of Singapore, 26-08-2026).

[AMER] Canada’s Cyber Centre reported on 25 August that Gitea vulnerability CVE-2026-60004 had been added to CISA’s Known Exploited Vulnerabilities catalogue, affecting versions before 1.27.1. The code-injection flaw can allow a repository writer to install an executable Git hook and run commands as the Gitea service account, making repository history, API activity, hook creation and host process evidence important when checking exposed instances (Source: Canadian Centre for Cyber Security, 25-08-2026).

[GLOBAL] INTERPOL announced on 25 August that Operation Jackal IV produced 58 arrests and identified 263 suspects across 22 countries while targeting West African organised-crime networks involved in cyber-enabled financial fraud and money laundering. Broad independent coverage corroborated the core operational figures, while investigators used seized data, financial accounts and cross-border intelligence to develop cases that remain subject to national investigative and judicial processes (Source: INTERPOL, 25-08-2026).

[APAC] Surat Cyber Crime Cell arrested a Chennai-based suspect in an investigation into bank accounts allegedly used to route cyber-fraud proceeds, regional reporting said on 25 August. Police examined 34 accounts linked to 113 complaints across 14 states and seized phones, laptops and SIM material, creating evidence for tracing beneficiaries, communications, identities and alleged laundering pathways while the wider investigation continues (Source: Telangana Today, 25-08-2026).

[EMEA] The UK Department for Education updated its digital and technology standards on 25 August so the filtering and monitoring core standard now references its generative-AI product safety standards. The amendment strengthens the documentary link between safeguarding, monitoring and AI governance in schools and colleges, increasing the importance of retained risk assessments, filtering decisions, incident records and evidence showing how technical controls were selected and reviewed (Source: UK Department for Education, 25-08-2026).

[APAC] Hong Kong’s Privacy Commissioner published agentic-AI guidance on 25 August requiring organisations to address data minimisation, security, access rights, continuous risk assessment, accountability, traceability and auditability when personal data is processed. The recommendations make relevant platform access logs, policy records, plugin controls and human-oversight evidence increasingly important when reconstructing how autonomous systems handled sensitive information or produced disputed outcomes (Source: Office of the Privacy Commissioner for Personal Data, 25-08-2026).

[AMER] The Linux Foundation announced on 25 August that it will govern TRACE, an open specification for hardware-attested runtime and compliance evidence for AI agents and confidential workloads. TRACE binds runtime environment, software, policy, data classification and tool use into portable cryptographically verifiable records, potentially strengthening cross-platform investigative and audit evidence while remaining a developing specification that complements rather than replaces conventional logs and authorisation records (Source: Linux Foundation, 25-08-2026).