This 48-hour DFM roundup tracks system recovery at Dustin and the UK Department for Education, cybercrime investigations in Australia and Singapore, major disruption at Boston Scientific and Springfield schools, new crypter and Microsoft vulnerability guidance, US and UK enforcement action, and policy moves on online child protection and Singapore’s digital infrastructure security and resilience requirements for investigators and security practitioners.

Digital investigations, cybercrime enforcement and infrastructure security dominate this 48-hour roundup. OpenAI agent behaviour, police analytics, mule-account tracing and cryptocurrency investigations sit alongside the Mathspace breach, a major Liquid Network bitcoin withdrawal, active MikroTik exploitation and Magento attacks. Policy developments in Germany and Australia further underline the growing need for evidential integrity, attribution discipline and globally coordinated cross-platform investigative readiness.

Digital investigations dominate this 48-hour roundup, with Thomson Reuters’ C-Track breach, Serbian spyware findings, a major driver-licence data investigation and blockchain tracing in Singapore. Other developments include Dustin’s cyber incident, law-firm breaches, critical Citrix NetScaler vulnerabilities, CERT-EU threat reporting, enforcement action in Singapore and the US, UK cyber legislation scrutiny, and updated NIST encryption guidance for investigators and security teams.

Novocure disclosed patient-record exposure, while investigators examined a BGP hijack that redirected Virtualizor updates. Mumbai and Cambodian authorities disrupted cyber-fraud operations, Aesto Health’s breach expanded to 9.5 million people, and Greece investigated attacks on state agencies. Europol disrupted the long-running Sality botnet as US prosecutors advanced a malware case and regulators issued healthcare and IoT security actions across multiple jurisdictions.

Cyber investigators trace fake APK fraud, prolonged digital-arrest scams and UPI theft, while Berlin assesses claimed ransomware data loss and Hasbro notifies employees after an exposure. New PaperCut exploitation details sharpen hunting guidance, US authorities narrow QTFY victim claims, and policymakers address AI-related cyber risk and UK resilience legislation, reinforcing the importance of evidence-led attribution and cross-platform investigative readiness globally.