[APAC] Tata Consultancy Services said in India that it investigated threat-intelligence alerts alleging exposure of employee data and found no credible evidence that its systems had been breached. The claims attributed to “TheHatman” involved more than 800,000 purported records, but a reviewed sample was described as several years old, making provenance, acquisition method and any connection to current TCS systems unresolved (Source: The Times of India, 11-08-2026)

[AMER] Uber Freight said in the United States that it was investigating unauthorised access to part of its systems and repositories after a hacker claimed to have stolen company files. Uber said the access had been identified, contained and remediated with no operational impact, while federal law enforcement was engaged and the claimed theft of nearly one million files remained unverified (Source: Reuters, 11-08-2026)

[AMER] Researchers operating a fictitious cryptocurrency company said they hired three people they suspect were North Korean IT workers and recorded their activity inside issued virtual machines. Identity documents, location inconsistencies, remote-access tooling and account activity provided multiple correlation points, although the researchers’ specific Famous Chollima attribution has not been confirmed by government sources and the individuals’ real identities remain unknown (Source: The Hacker News, 11-08-2026)

[GLOBAL] US and South Korean authorities warned that Gunra ransomware operators are targeting government and critical-infrastructure organisations worldwide using exposed services, weak credentials and known vulnerabilities. Reported intrusion paths include Fortinet flaws, VPN and SSH access, while observed tactics include direct ransom approaches to management and both Windows and Linux encryption, giving investigators infrastructure, access and communication artefacts to correlate across incidents (Source: BleepingComputer, 11-08-2026)

[AMER] Coweta, Oklahoma, said a ransomware attack affected its government computers, files and digital services, although police and fire systems hosted off-site remained operational. Officials retained off-site backups and brought in cybersecurity specialists while federal and state authorities became involved, leaving restoration teams to clear affected systems and investigators to establish the initial access path, ransomware deployment and scope of any data exposure (Source: The Record, 11-08-2026)

[AMER] US healthcare provider AnMed continued operating with ten facilities closed after a cyberattack, while its Facebook page was briefly used to display messages associated with a ransomware group. The Gentlemen claimed to have stolen six terabytes of sensitive data, but AnMed said it had not confirmed the claim, leaving investigators to establish whether the social-media compromise, network intrusion and alleged data theft share the same evidential chain (Source: The Record, 11-08-2026)

[GLOBAL] Microsoft’s August security release addressed hundreds of vulnerabilities, including CVE-2026-68820, a Windows Ancillary Function Driver flaw reported as already exploited in the wild. Published counts vary according to how fixes are classified, so the investigative priority is the confirmed exploitation signal and the affected-system evidence needed to establish exposure, privilege escalation and possible follow-on activity rather than the headline total (Source: SecurityWeek, 11-08-2026)

[GLOBAL] Cisco published fixes for CVE-2026-20349, a high-severity denial-of-service vulnerability affecting remote-access SSL VPN services on Secure Firewall ASA and Threat Defense software. An unauthenticated remote attacker can send crafted HTTP requests that may force a device to reload, and Cisco lists no workaround, making appliance logs, repeated connection attempts and unexpected reload events useful evidence when assessing suspected exploitation (Source: Cisco, 11-08-2026)

[EMEA] The UK National Crime Agency said Justin Swaddle was sentenced to two years’ imprisonment after an investigation linked him to online abuse involving 117 female victims worldwide. Examination of his phone and computer recovered hundreds of conversations across Snapchat, Telegram and Discord, demonstrating how preserved device content and cross-platform account correlation can connect pseudonymous communications to a suspect and establish the scale of offending (Source: National Crime Agency, 10-08-2026)

[APAC] Police in Deoria, India, arrested four alleged members of a cybercrime network accused of operating mule bank accounts and routing illicit funds through cryptocurrency and payment platforms. Investigators seized cash, SIM cards, point-of-sale devices, identity documents, bank materials and ATM cards, and are examining transaction volumes and money trails to identify further participants named in the continuing inquiry (Source: The Times of India, 12-08-2026)

[AMER] US senators Adam Schiff and Amy Klobuchar introduced legislation proposing stronger federal cybersecurity oversight and support for drinking-water and wastewater systems following recent attacks on the sector. The bill would expand EPA responsibilities, technical assistance and funding, while its sponsors’ account of coordinated attacks on more than 30 water systems remains a policy claim that utilities and investigators will need to distinguish from independently established incident evidence (Source: US Senate, 10-08-2026)

[EMEA] The UK National Cyber Security Centre added a water-sector worked example to its Secure Connectivity Principles for operational technology, illustrating how a fictional regional utility could apply the guidance. The example addresses legacy infrastructure, safety, reliability and resilience, giving organisations a structured basis for documenting connectivity decisions and security assumptions that can later support evidence preservation, incident reconstruction and accountability when operational technology is investigated (Source: NCSC, 11-08-2026)