A security weakness in widely used US DNA-analysis software left decades of digital forensic case files vulnerable to alteration without reliable detection, although researchers reported no evidence of real-world exploitation [AMER]. The finding exposes a chain-of-custody gap between protected physical samples and unsigned digital records, making independent integrity verification and retrospective examination of affected files central to any evidential review (Source: The Wall Street Journal, 03-08-2026).

UK Government Investments disclosed that sensitive management information and personal details relating to 51 officials remained publicly accessible for about 40 hours after an internal handling failure [EMEA]. External specialists assessed the exposure and recommended controls, while investigators must preserve access logs, publication histories and notification records to establish what was viewed, copied or indexed during the documented disclosure window (Source: The Guardian, 02-08-2026).

Kolkata cybercrime officers arrested three suspects after tracing an alleged digital-arrest fraud in which a victim was deceived into transferring Rs 1.1 crore to accounts controlled by the network [APAC]. Investigators will need to correlate call records, messaging accounts, bank transfers, mule-account ownership and seized devices to establish each suspect’s role and identify any remote operators who directed the impersonation and movement of funds (Source: The Times of India, 03-08-2026).

Liechtenstein formed a crisis unit after attackers accessed the national register identifying beneficial owners of companies, foundations and trusts, affecting records linked to about 31,000 people [EMEA]. Officials reported no detected deletion or manipulation, but the investigation must still validate database integrity, reconstruct the intrusion path and determine whether copied ownership data could support fraud, coercion or evasion of financial-crime controls (Source: Associated Press, 03-08-2026).

Townsville Christian College disclosed that attackers used a remote connection to obtain administrative privileges and encrypt systems during a ransomware incident affecting the Australian school [APAC]. Its investigation found no evidence of bulk exfiltration, but investigators should preserve remote-access logs, privilege changes, encryption artefacts and recovery records to test that conclusion and determine whether personal, health, financial or student information was viewed before containment (Source: The Courier-Mail, 31-07-2026).

A ransomware-tracking service reported that European standards bodies CEN and CENELEC had been named by the CoinbaseCartel group as victims of a data-theft and encryption attack [EMEA]. The claim remained dependent on criminal-group reporting rather than a detailed victim statement, so confirmation requires independent evidence of service disruption, stolen data, intrusion timing and any overlap between the alleged compromise and shared standards-development platforms (Source: Dexpose, 02-08-2026).

N-able released N-central build 2026.3.1.7 after disclosure of CVE-2026-18577, a newly reported vulnerability affecting the remote monitoring and management platform [AMER]. Organisations using N-central should preserve authentication, administrative and agent-deployment logs before upgrading, then examine them for unexplained account use or configuration changes because compromise of a management platform can provide broad access across multiple customer environments (Source: The Hacker News, 02-08-2026).

MediaTek published its August security bulletin covering high-severity memory-safety vulnerabilities affecting multiple mobile, modem, display and connectivity chipsets used across several device classes [APAC]. Investigators examining potentially affected devices should record chipset and firmware versions before patching, preserve crash and system logs, and distinguish theoretical exposure from evidence of exploitation because the bulletin describes vulnerable components but does not itself establish that compromise occurred (Source: MediaTek, 03-08-2026).

Goa Police arrested seven suspects during Operation Cyber Vigil, an investigation spanning 11 Indian states and targeting networks linked to online fraud [APAC]. The multi-jurisdictional inquiry will depend on correlating payment trails, mobile devices, messaging accounts and platform records across state boundaries, with seized-device attribution and preservation of cloud evidence likely to determine whether additional operators and beneficiary accounts can be identified (Source: The Times of India, 03-08-2026).

Thai police arrested an Indonesian national in Phuket who was wanted in connection with an alleged US$10 million cyberfraud case following information supplied by the FBI [APAC]. Cross-border investigators will need to align identity records, travel data, financial transfers and device evidence across Thai, Indonesian and US jurisdictions, while separating proven transactions from the wider loss figure attributed to the suspect (Source: Al Jazeera, 01-08-2026).

Transparency obligations under Article 50 of the EU AI Act began applying on 2 August, requiring disclosures for certain human-facing and synthetic-content systems while enforcement powers also expanded [EMEA]. For cyber investigations, the new requirements may improve provenance and accountability where AI-generated material, automated decisions or manipulated media become evidence, but investigators will still need technical validation rather than treating statutory labels as proof of authenticity (Source: Reuters, 31-07-2026).

Singapore’s Cyber Security Agency and Infocomm Media Development Authority issued joint guidance on the safe and secure use of generative AI tools on 3 August [APAC]. The advisory reinforces the need for organisations to control sensitive inputs, verify generated outputs and retain auditable records of AI-assisted activity, creating clearer investigative baselines when data leakage, unauthorised automation or disputed machine-generated content is later examined (Source: Cyber Security Agency of Singapore, 03-08-2026).