This edition examines AI coding agents executing malicious GitHub content, Tata Electronics strengthening controls after a reported breach, expanding Klue-Salesforce victim reporting, insurance-sector cyber disruption, Operation Endgame malware infrastructure takedowns, and evolving supplier risk. Coverage also explores Cisco SD-WAN vulnerabilities, fraud website ecosystems and investigative practices for preserving provenance across increasingly complex digital environments worldwide.

This edition examines the cyberattack affecting France’s national statistics department, disruption following a major Delhi data centre fire, supplier-targeted attacks against education technology providers, Operation Endgame malware infrastructure takedowns, newly exploited vulnerabilities added to CISA’s KEV catalogue, and continuing software supply-chain risks requiring stronger evidence preservation, dependency mapping and investigative readiness across interconnected digital environments.

This edition examines the Tata Electronics breach claim, ransomware disruption at Bajaj Auto, cyberattacks affecting Iranian banking services, and enforcement action targeting infrastructure linked to Southeast Asian scam operations. Coverage also includes AI-related cyber risk warnings, post-quantum security policy developments, WordPress plugin exploitation, and investigative challenges involving evidence provenance, attribution and complex supply-chain relationships globally.

Nintendo confirmed employee data theft through a third-party provider, while Kodak acknowledged a breach following claims by ShinyHunters. Novo Nordisk faced extortion allegations, Mackay Sugar continued recovery from operational disruption, and authorities dismantled a Chinese phishing service. Investigators also tracked Fortinet credential exposure, ransomware defence-evasion techniques, critical NGINX vulnerabilities, and emerging policy questions surrounding AI access controls.

This 48-hour roundup covers fake Maine breach-portal filings, GitHub metadata abuse linked to Shai-Hulud variants, Sri Lankan scam-network raids, Indian cryptocurrency fraud tracing, claimed Novo Nordisk and Foxconn data theft, CISA and CERT-In vulnerability warnings, US domain seizures for AI-generated abuse, and UK and FTC policy signals on age assurance and imposter scams across public, platform and enforcement evidence streams.