This 48-hour roundup examines healthcare and insurance breaches, ransomware disruption, SharePoint exploitation, darknet investigations and coordinated law-enforcement action. It also covers the sentencing of Scattered Spider members, charges linked to cyber-enabled investment fraud, vulnerability disclosure guidance and European data-protection enforcement, highlighting the growing importance of evidence preservation, cross-border investigation and operational resilience for digital investigation teams worldwide.

This edition examines healthcare and nuclear-sector data exposure, ransomware infrastructure, exploited Microsoft and SAP vulnerabilities, and international cybercrime enforcement. The roundup highlights why digital investigations increasingly depend on evidence provenance, cross-platform correlation, resilient logging and careful attribution. It also considers emerging policy responses affecting critical infrastructure, artificial intelligence coordination and the handling of complex, cross-border digital evidence by investigators worldwide.

This edition tracks major developments in digital investigations, cybercrime enforcement, ransomware activity, infrastructure exploitation and policy readiness. Highlights include the Odido telecoms investigation, arrests linked to cyber fraud, rising global ransomware disclosures, active exploitation of Joomla extensions, and preparations for EU Cyber Resilience Act reporting duties. The roundup also examines cloud assurance and evidential challenges across distributed environments for investigators.

This edition tracks major developments in cybercrime enforcement, ransomware prosecutions, infrastructure exploitation and UK cyber resilience. Highlights include more than 5,800 arrests in INTERPOL’s latest fraud operation, new Ryuk and BlackCat cases, the widening FortiBleed credential campaign, OpenPLC vulnerabilities, reported AI-enabled ransomware activity and plans for an AI-supported national Cyber Shield.

The latest DFM 48h Global News Roundup covers KDDI credential exposure, public-sector extortion, Medtronic data compromise, Gitea and ColdFusion exploitation, Spain’s arrest of a suspected pro-Russian hacktivist supporter, Canadian active cyber operations, and new UK and EU policy developments shaping investigative readiness, evidential integrity and cyber resilience.