[AMER] Baylor Genetics disclosed that an unauthorised party accessed portions of its network between 11 and 17 June after suspicious activity was detected within a limited part of its information technology environment. The company said a forensic investigation and subsequent data review identified affected files and individuals, making preserved access logs, file-level evidence and notification records central to establishing scope and evidential integrity (Source: Baylor Genetics, 14-08-2026)

[APAC] Sogang University in Seoul reported that personal information associated with about 180,000 students, alumni and employees was exposed following an unidentified external attack against its integrated login environment. The university blocked overseas access and began vulnerability analysis with security specialists, while account records, authentication logs and affected-field mapping will be critical to determining entry point, duration, extraction scope and whether password data was subsequently abused (Source: SBS News, 15-08-2026)

[AMER] A seller on a data-trading forum claimed to hold 1.7 million McDonald’s employee records obtained from an Azure environment, publishing an 8,000-row sample that researchers said appeared internally consistent. The age and full size of the dataset remain unconfirmed, so investigators would need tenant logs, credential-use records, export activity and independent comparison with authoritative employee data before treating the claimed scale or access path as established (Source: Security Affairs, 17-08-2026)

[EMEA] Investigators in Germany and Brazil linked a 2023 fraud against Commerzbank to exploitation of a transaction-system software flaw, with four suspects arrested in Brazil and three others identified in Europe. Authorities are tracing roughly €30 million allegedly moved through the scheme, requiring correlation of banking transactions, service-provider records, beneficiary accounts, device evidence and seized assets to separate technical exploitation from the wider laundering network (Source: Cybernews, 16-08-2026)

[GLOBAL] SafePal disclosed unauthorised access to order information affecting 39,798 customers who bought hardware wallets between March 2025 and April 2026, exposing names, contact details, shipping addresses and purchase information. SafePal attributed the exposure to an authorisation defect in an order-tracking plug-in and said wallet secrets and payment credentials were unaffected, narrowing the investigation toward application access, order records and downstream phishing risk (Source: SafePal, 16-08-2026)

[EMEA] Swiss secure-messaging provider Threema reported repeated distributed denial-of-service attacks that made hosted services temporarily unavailable and also affected its colocation provider, while self-hosted OnPrem deployments remained operational. Threema activated additional upstream filtering and expanded status reporting, and the available evidence supports an availability incident rather than compromise of message content or accounts, leaving attacker identity and precise targeting intent unresolved (Source: Threema, 14-08-2026)

[GLOBAL] Security researchers reported active probing of an unpatched GeoServer flaw involving unauthenticated SQL injection that could permit remote code execution on certain configurations. Public reporting showed multiple sources repeating the technical risk but did not establish widespread compromise, so exposed installations should preserve web, database and process telemetry and distinguish scanning attempts from successful exploitation before attributing operational impact to the vulnerability (Source: SecurityWeek, 14-08-2026)

[GLOBAL] Researchers reported exploitation attempts against CVE-2026-58231, a maximum-severity SAP Commerce Cloud vulnerability involving insufficient authorisation checks and input validation shortly after patches became available. Organisations running affected deployments should correlate web requests, application logs, privileged actions and newly created artefacts to determine whether exploitation succeeded, because scanning activity or vulnerable versions alone do not demonstrate that an attacker gained access or executed follow-on actions (Source: The Hacker News, 15-08-2026)

[APAC] Singapore Police arrested 20 people suspected of facilitating government-impersonation, job, e-commerce, investment, romance and other scams through misuse of bank accounts, credentials, Singpass access and SIM registrations. The cases create a broad evidential trail across identity systems, telecommunications records, financial transactions and devices, with investigators needing to correlate account ownership and control with the timing and movement of suspected criminal proceeds as charges commence (Source: Singapore Police Force, 16-08-2026)

[APAC] Navi Mumbai Cyber Police arrested four people accused of operating a fake Apple technical-support call centre that allegedly targeted United States customers from rented premises in Mahape. Investigators are examining the call infrastructure, devices, scripts, victim contacts and payment routes used by the operation, which should allow attribution of individual roles and identification of additional victims or associates beyond those established during the initial raid (Source: WE News, 15-08-2026)

[EMEA] The European Union’s e-Evidence Regulation becomes applicable on 18 August, enabling judicial authorities to issue European Production and Preservation Orders directly for electronic evidence held by service providers in other member states. The framework materially changes cross-border evidence acquisition by formalising preservation and production routes, increasing the importance of documented legal authority, provider handling, provenance and chain-of-custody controls when digital records move between jurisdictions (Source: EUR-Lex, 17-08-2026)

[APAC] India’s Central Electricity Authority introduced new cybersecurity requirements for the power sector, with current reporting highlighting controls for sensitive data, cloud-hosted information and historical operational records. For investigations involving energy infrastructure, the rules increase expectations around record retention, system accountability and protection of operational data, improving the evidential base available for reconstructing unauthorised access or manipulation across interconnected generation, transmission and distribution environments (Source: Times of India, 17-08-2026)