Nintendo confirmed employee data theft through a third-party provider, while Kodak acknowledged a breach following claims by ShinyHunters. Novo Nordisk faced extortion allegations, Mackay Sugar continued recovery from operational disruption, and authorities dismantled a Chinese phishing service. Investigators also tracked Fortinet credential exposure, ransomware defence-evasion techniques, critical NGINX vulnerabilities, and emerging policy questions surrounding AI access controls.

This 48-hour roundup covers fake Maine breach-portal filings, GitHub metadata abuse linked to Shai-Hulud variants, Sri Lankan scam-network raids, Indian cryptocurrency fraud tracing, claimed Novo Nordisk and Foxconn data theft, CISA and CERT-In vulnerability warnings, US domain seizures for AI-generated abuse, and UK and FTC policy signals on age assurance and imposter scams across public, platform and enforcement evidence streams.

University data breaches, long-term espionage activity, banking disruptions, critical enterprise vulnerabilities and major law-enforcement operations feature in this 48-hour roundup. Coverage includes the Nottingham University breach, PeopleSoft zero-day exploitation, cyberattacks affecting Iranian banks, active Splunk and Ivanti security risks, FBI-led disruption of phishing infrastructure, and new policy measures aimed at accelerating cyber resilience and evidence preservation.

Canvas breach investigations affecting universities, ransomware disruption at West Pharmaceutical and Foxconn, active exploitation of a critical cPanel vulnerability, and Europol’s latest cybercrime assessment headline this 48-hour roundup. Coverage also examines AI-assisted exploitation, leaked ransomware operator data, industrial control system security advisories, and evolving policy guidance on cyber resilience and frontier artificial intelligence.

Investigators faced a week shaped by evidence preservation and attribution challenges. The FBI highlighted cyber range training for realistic digital evidence collection, while the Justice Department resolved a search-warrant compliance case involving cloud data retention. Coverage also examined UK telecoms security policy changes, active Chrome and LiteLLM exploitation, a French government messaging compromise, and expanding scam operations globally.