AI-linked intrusions, exposed government systems, exploited edge devices and state-linked spyware all feature in this edition, alongside major breach investigations, criminal prosecutions and new regulatory guidance. Across the stories, a common theme emerges: attribution is becoming harder, evidence more fragmented and investigative certainty more valuable. This roundup explores what the latest cases reveal about the changing demands on digital investigations.

Investigators tracked a FIFA-themed fraud network, examined a law firm’s Microsoft 365 breach, and followed prosecutions tied to stolen government access. Major disclosures affected telecom and travel customers, while researchers documented FortiClient exploitation and The Gentlemen ransomware. Singapore warned about AI agent risks, ENISA assessed NIS2 sector maturity, and Dutch police arrested a suspect linked to the Ajax data breach.