In the past 48 hours, defenders juggled Plex breach fallout, Microsoft’s Patch Tuesday triage, and npm supply-chain hijacks. Adobe Commerce shipped critical fixes, while healthcare and media breaches broadened impact. U.S. prosecutors charged a multi-ransomware administrator and posted rewards. Takeaways: accelerate credential resets, lock down publish keys, and run disciplined emergency patch cycles. Prioritize monitoring, SBOM mapping, and phishing verification.

Chinese threat actors impersonated a U.S. lawmaker in a spyware campaign, while a ransomware group disrupted operations at Ireland’s K Club. CISA flagged a critical Sitecore CVE under active exploitation. A U.S. bill to extend cyber intel sharing advanced. DFIR teams must prioritise patching, phishing defences, and policy tracking this week.

In the past 48 hours, defenders faced urgent patch mandates for Sitecore and SAP S/4HANA exploitation, while Google fixed two Android zero-days. Investigations revealed a Chess.com data breach and GhostRedirector SEO hijacks. Major disruptions hit Jaguar Land Rover, and policy shifts saw U.S. info-sharing reauthorization progress alongside EU and Czech regulatory actions.

Ransomware disrupted Sweden’s municipal IT and Pennsylvania’s Attorney General’s office, while attackers abused Velociraptor and VS Code tunnels for stealthy access. New threats include WhatsApp zero-click exploits, TamperedChef malvertising, Brokewell Android malware, and ScarCruft’s RokRAT espionage. Indian police dismantled trafficking-to-scam pipelines and online fraud rings, underscoring cybercrime’s human dimension alongside technical threats.

The space sector is undergoing a transformation. Cloud computing is rapidly reshaping how satellites are controlled and managed on the ground, with Ground Station/Segment as a Service (GSaaS) emerging as a cost-effective, scalable alternative to traditional infrastructure.